# TLS certificate errors — badssl.com provides endpoints with intentionally
# broken certificates. Python's ssl module rejects them by default.
#
# Note: badssl.com may intermittently reset the connection instead of
# completing the TLS handshake. The error message will then read
# "[Errno 54] Connection reset by peer" rather than CERTIFICATE_VERIFY_FAILED,
# but simple.py still correctly reports FAIL in either case.
#
# Requires internet access.
#
# Run: python3.14 python/simple.py python/configs/tls-errors.txt
# Expected exit code: 1

# Certificate has expired
https://expired.badssl.com/

# Certificate is self-signed (not trusted by the system CA store)
https://self-signed.badssl.com/

# Certificate chain is incomplete (intermediate CA missing)
https://incomplete-chain.badssl.com/