summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorsblondon <stephane.blondon@gmail.com>2023-01-02 17:59:57 +0100
committerGitHub <noreply@github.com>2023-01-02 08:59:57 -0800
commit6ba30da01c3c9ae704090ef0691f03054ed2013d (patch)
tree75b55c1a1d2225fea564e63830fea01d0dbc1143
parent67809b4a4d69ae88ad1e6c77a21e9c7a4a081e03 (diff)
downloaddnspython-6ba30da01c3c9ae704090ef0691f03054ed2013d.tar.gz
Remove obsolete comment (#873)
-rw-r--r--dns/query.py8
1 files changed, 1 insertions, 7 deletions
diff --git a/dns/query.py b/dns/query.py
index 11e5fc8..b4cd69f 100644
--- a/dns/query.py
+++ b/dns/query.py
@@ -1032,13 +1032,7 @@ def tls(
where, port, source, source_port
)
if ssl_context is None and not sock:
- # LGTM complains about this because the default might permit TLS < 1.2
- # for compatibility, but the python documentation says that explicit
- # versioning is deprecated, and that as of python 3.6 it will negotiate
- # the highest version possible. We also set a minimum version when we
- # can, even though this might require a future dnspython release if that
- # version becomes deprecated.
- ssl_context = ssl.create_default_context() # lgtm[py/insecure-protocol]
+ ssl_context = ssl.create_default_context()
ssl_context.minimum_version = ssl.TLSVersion.TLSv1_2
if server_hostname is None:
ssl_context.check_hostname = False