bpo-36576: Skip test_ssl and test_asyncio tests failing with OpenSSL 1.1.1

Some test_ssl and test_asyncio are written for OpenSSL 1.0 and TLS

1.0, but fail with OpenSSL 1.1.1 and TLS 1.3.

Fixing these needs require to backport new ssl flags like

ssl.OP_NO_TLSv1_3 or ssl.OP_NO_COMPRESSION which cannot be done in a

minor 3.5.x release. Moreover, it is not really worth it: the code

works fine, issues are in the tests.

Backport of: https://github.com/python/cpython/pull/12694

Resolves: rhbz#1685609

diff --git a/Lib/test/test_asyncio/test_events.py b/Lib/test/test_asyncio/test_events.py

index 6373618..3db3707 100644

--- a/Lib/test/test_asyncio/test_events.py

+++ b/Lib/test/test_asyncio/test_events.py

@@ -33,6 +33,12 @@ except ImportError:

     from asyncio import test_support as support

+if ssl is not None:

+    IS_OPENSSL_1_1_1 = ssl.OPENSSL_VERSION_INFO >= (1, 1, 1)

+else:

+    IS_OPENSSL_1_1_1 = False

+

+

 def data_file(filename):

     if hasattr(support, 'TEST_HOME_DIR'):

         fullname = os.path.join(support.TEST_HOME_DIR, filename)

@@ -1049,6 +1055,7 @@ class EventLoopTestsMixin:

             self.test_create_unix_server_ssl_verify_failed()

     @unittest.skipIf(ssl is None, 'No ssl module')

+    @unittest.skipIf(IS_OPENSSL_1_1_1, "bpo-36576: fail on OpenSSL 1.1.1")

     def test_create_server_ssl_match_failed(self):

         proto = MyProto(loop=self.loop)

         server, host, port = self._make_ssl_server(

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py

index 401cc2f..8edf055 100644

--- a/Lib/test/test_ssl.py

+++ b/Lib/test/test_ssl.py

@@ -24,6 +24,7 @@ ssl = support.import_module("ssl")

 PROTOCOLS = sorted(ssl._PROTOCOL_NAMES)

 HOST = support.HOST

 IS_LIBRESSL = ssl.OPENSSL_VERSION.startswith('LibreSSL')

+IS_OPENSSL_1_1_1 = not IS_LIBRESSL and ssl.OPENSSL_VERSION_INFO >= (1, 1, 1)

 def data_file(*name):

@@ -697,6 +698,7 @@ class ContextTests(unittest.TestCase):

             ctx.set_ciphers("^$:,;?*'dorothyx")

     @skip_if_broken_ubuntu_ssl

+    @unittest.skipIf(IS_OPENSSL_1_1_1, "bpo-36576: fail on OpenSSL 1.1.1")

     def test_options(self):

         ctx = ssl.SSLContext(ssl.PROTOCOL_TLSv1)

         # OP_ALL | OP_NO_SSLv2 | OP_NO_SSLv3 is the default value

@@ -2655,6 +2657,7 @@ else:

             self.assertIn("no shared cipher", str(server.conn_errors[0]))

         @unittest.skipUnless(ssl.HAS_ECDH, "test requires ECDH-enabled OpenSSL")

+        @unittest.skipIf(IS_OPENSSL_1_1_1, "bpo-36576: fail on OpenSSL 1.1.1")

         def test_default_ecdh_curve(self):

             # Issue #21015: elliptic curve-based Diffie Hellman key exchange

             # should be enabled by default on SSL contexts.