'When calling L{sslverify.OpenSSLCertificateOptions} with
C{raiseMinimumTo} set to a value lower than Twisted\'s default will
cause it to use the more secure default.'

def test_tlsProtocolsAtLeastWillAcceptHigherDefault(self):

    opts = sslverify.OpenSSLCertificateOptions(privateKey=self.sKey, certificate=self.sCert, raiseMinimumTo=sslverify.TLSVersion.SSLv3)
    opts._contextFactory = FakeContext
    ctx = opts.getContext()
    options = (((SSL.OP_NO_SSLv2 | SSL.OP_NO_COMPRESSION) | SSL.OP_CIPHER_SERVER_PREFERENCE) | SSL.OP_NO_SSLv3)
    self.assertEqual(options, (ctx._options & options))
    self.assertEqual(opts._defaultMinimumTLSVersion, sslverify.TLSVersion.TLSv1_0)
