Intermediate changes

commit_hash:20c3eb2f2d78b5f654ec928c071692413a1bd96d

1 files changed, 14 insertions, 0 deletions

diff --git a/contrib/python/pytest-localserver/py3/tests/test_https.py b/contrib/python/pytest-localserver/py3/tests/test_https.py
index 4c676d17533..d66450b5bb0 100644
--- a/contrib/python/pytest-localserver/py3/tests/test_https.py
+++ b/contrib/python/pytest-localserver/py3/tests/test_https.py
@@ -1,3 +1,4 @@
+import pytest
 import requests
 
 from pytest_localserver import https
@@ -41,3 +42,16 @@ def test_HEAD_request(httpsserver):
     resp = requests.head(httpsserver.url, verify=False)
     assert resp.status_code == 200
     assert resp.headers["Content-type"] == "text/plain"
+
+
+def test_client_does_not_trust_self_signed_certificate(httpsserver):
+    httpsserver.serve_content("TEST!", headers={"Content-type": "text/plain"})
+    with pytest.raises(requests.exceptions.SSLError, match="CERTIFICATE_VERIFY_FAILED"):
+        requests.get(httpsserver.url, verify=True)
+
+
+def test_add_server_certificate_to_client_trust_chain(httpsserver):
+    httpsserver.serve_content("TEST!", headers={"Content-type": "text/plain"})
+    resp = requests.get(httpsserver.url, verify=httpsserver.certificate)
+    assert resp.status_code == 200
+    assert resp.headers["Content-type"] == "text/plain"