From c3ddeae3f35be646ce9cb471ba4ade072343be1d Mon Sep 17 00:00:00 2001
From: Jay Lee <jay0lee@gmail.com>
Date: Sun, 2 Jan 2022 14:38:27 -0500
Subject: [PATCH] Make TLS 1.3 the default minimum.

Admins can still downgrade to 1.2 if they need to. Most should not need to.
---
 src/gam/var.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gam/var.py b/src/gam/var.py
index debc2d2f..f0b2e472 100644
--- a/src/gam/var.py
+++ b/src/gam/var.py
@@ -1291,7 +1291,7 @@ GC_TLS_MAX_VERSION = 'tls_max_ver'
 # Path to certificate authority file for validating TLS hosts
 GC_CA_FILE = 'ca_file'
 
-TLS_MIN = 'TLSv1_2' if hasattr(ssl.SSLContext(), 'minimum_version') else None
+TLS_MIN = 'TLSv1_3' if hasattr(ssl.SSLContext(), 'minimum_version') else None
 GC_Defaults = {
     GC_ADMIN_EMAIL: '',
     GC_AUTO_BATCH_MIN: 0,