diff --git a/parsedmarc/syslog.py b/parsedmarc/syslog.py index 2d1c4c0..d96e56b 100644 --- a/parsedmarc/syslog.py +++ b/parsedmarc/syslog.py @@ -108,9 +108,12 @@ class SyslogClient(object): return handler else: # TLS protocol - # Create SSL context + # Create SSL context with secure defaults ssl_context = ssl.create_default_context() + # Explicitly set minimum TLS version to 1.2 for security + ssl_context.minimum_version = ssl.TLSVersion.TLSv1_2 + # Configure server certificate verification if cafile_path: ssl_context.load_verify_locations(cafile=cafile_path)