Fix test_https_over_http_error on Windows with OpenSSL 3.1+

On Windows, the TCP reset (RST) takes a different code path than Linux,
causing OpenSSL 3.1+ to report 'wrong version number' rather than
'record layer failure'. Accept either string when IS_ABOVE_OPENSSL31
is True — the same pattern used in CPython's own test_ssl.py.

Author: julianz-

cheroot/test/test_ssl.py

@@ -697,14 +697,22 @@ def test_https_over_http_error(http_server, ip_addr):
         http.client.HTTPSConnection(
             f'{interface}:{port}',
         ).request('GET', '/')
-    expected_substring = (
-        'record layer failure'
-        if IS_ABOVE_OPENSSL31
-        else 'wrong version number'
-        if IS_ABOVE_OPENSSL10
-        else 'unknown protocol'
-    )
-    assert expected_substring in ssl_err.value.args[-1]
+    actual_error = ssl_err.value.args[-1]
+    if IS_ABOVE_OPENSSL31:
+        # OpenSSL 3.1+ usually reports 'record layer failure', but some builds
+        # report 'wrong version number' instead (e.g. Python 3.14.6 on Windows
+        # where the TCP reset takes a different code path). See CPython:
+        # https://github.com/python/cpython/blob/\
+        # 1b9fe5c7226eccc8b269a7443148033080399f43\
+        # /Lib/test/test_ssl.py#L5705
+        assert (
+            'record layer failure' in actual_error
+            or 'wrong version number' in actual_error
+        ), actual_error
+    elif IS_ABOVE_OPENSSL10:
+        assert 'wrong version number' in actual_error
+    else:
+        assert 'unknown protocol' in actual_error
 
 
 def test_http_over_https_no_data(mocker):

docs/changelog-fragments.d/+fix-https-over-http-windows.bugfix.rst

@@ -0,0 +1,3 @@
+Fixed ``test_https_over_http_error`` failing on Windows with OpenSSL 3.1+,
+where the SSL error message is ``wrong version number`` rather than
+``record layer failure`` -- by :user:`julianz-`.