pythongh-148600: Add OpenSSL 4.0.0 support to test configurations (python#149356)

Co-authored-by: Charlie Lin <tuug@gmx.us>
(cherry picked from commit fc96028)

Author: vstinner

.github/workflows/build.yml

@@ -310,6 +310,7 @@ jobs:
           - { name: openssl, version: 3.4.5 }
           - { name: openssl, version: 3.5.6 }
           - { name: openssl, version: 3.6.2 }
+          - { name: openssl, version: 4.0.0 }
     env:
       SSLLIB_VER: ${{ matrix.ssllib.version }}
       MULTISSL_DIR: ${{ github.workspace }}/multissl

Lib/test/test_poplib.py

@@ -184,7 +184,8 @@ def _do_tls_handshake(self):
                 elif err.args[0] == ssl.SSL_ERROR_EOF:
                     return self.handle_close()
                 # TODO: SSLError does not expose alert information
-                elif ("SSLV3_ALERT_BAD_CERTIFICATE" in err.args[1] or
+                elif ("TLS_ALERT_BAD_CERTIFICATE" in err.args[1] or
+                      "SSLV3_ALERT_BAD_CERTIFICATE" in err.args[1] or
                       "SSLV3_ALERT_CERTIFICATE_UNKNOWN" in err.args[1]):
                     return self.handle_close()
                 raise
@@ -415,6 +416,7 @@ def test_stls_context(self):
         self.assertEqual(ctx.check_hostname, True)
         with self.assertRaises(ssl.CertificateError):
             resp = self.client.stls(context=ctx)
+
         self.client = poplib.POP3("localhost", self.server.port,
                                   timeout=test_support.LOOPBACK_TIMEOUT)
         resp = self.client.stls(context=ctx)

Misc/NEWS.d/next/Tests/2026-04-21-12-33-14.gh-issue-148600.vnTb3t.rst

@@ -0,0 +1 @@
+Add OpenSSL 4.0.0 support to test configurations.

Tools/ssl/multissltests.py

@@ -54,6 +54,7 @@
     "3.4.5",
     "3.5.6",
     "3.6.2",
+    "4.0.0",
     # See make_ssl_data.py for notes on adding a new version.
 ]