bpo-34001: Change handling of SSL protocol bounds with LibreSSL by alanhuang122 · Pull Request #8055 · python/cpython

Under LibreSSL, bounds cannot be set such that minimum_version >
maximum_version. This commit codifies that behavior, and
introduces a new error message to indicate the issue.

LibreSSL behaves differently than OpenSSL when setting protocol
bounds. This commit fixes some failing tests and adds checks and
more detailed error messages.

This commit fixes tests by removing invalid range settings.

This commit adds tests for the new {min,max}imum_version restrictions.
Attempting to set an invalid range should ValueError, and the value
should not be changed after the attempt.