# HG changeset patch
# User Yuya Nishihara <yuya@tcha.org>
# Date 2019-03-17 03:37:57
# Node ID 4748938ee0c742006f8cef4db0f2ca4963abd930
# Parent  25fc5b96d1c30468417ee0d690c2979db362edd0

test-https: turn off system OpenSSL configuration

This mostly fixes the test failure on Debian sid where TLS 1.0 and 1.1 are
disabled by default.

https://sources.debian.org/patches/openssl/1.1.1a-1/Set-systemwide-default-settings-for-libssl-users.patch/

$OPENSSL_CONF could be set by run-tests.py, but the other tests should work
without a "legacy" TLS, so I decided to not.

diff --git a/tests/test-https.t b/tests/test-https.t
--- a/tests/test-https.t
+++ b/tests/test-https.t
@@ -2,6 +2,12 @@
 
 Proper https client requires the built-in ssl from Python 2.6.
 
+Disable the system configuration which may set stricter TLS requirements.
+This test expects that legacy TLS versions are supported.
+
+  $ OPENSSL_CONF=
+  $ export OPENSSL_CONF
+
 Make server certificates:
 
   $ CERTSDIR="$TESTDIR/sslcerts"