Ensure safe defaults for TLS

Signed-off-by: Salvatore Mesoraca <[email protected]>
valkey-io · Aug 7, 2024 · 30cc14c · 30cc14c
1 parent fb83d2d
commit 30cc14c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/valkey/connection.py b/valkey/connection.py
@@ -846,7 +846,9 @@ def _wrap_socket_with_ssl(self, sock):
             context.load_verify_locations(
                 cafile=self.ca_certs, capath=self.ca_path, cadata=self.ca_data
             )
-        if self.ssl_min_version is not None:
+        if self.ssl_min_version is None:
+            context.minimum_version = ssl.TLSVersion.TLSv1_2
+        else:
             context.minimum_version = self.ssl_min_version
         if self.ssl_ciphers:
             context.set_ciphers(self.ssl_ciphers)