From: Brian Wellington <bwelling@xbill.org>
Date: Mon, 30 Sep 2019 18:56:27 +0000 (-0700)
Subject: Clients should pass SERVER_AUTH.
X-Git-Tag: v2.0.0rc1~351^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=70006a82afb6ab440c1d6d751f4eb0d270cc5c7f;p=thirdparty%2Fdnspython.git

Clients should pass SERVER_AUTH.
---

diff --git a/dns/query.py b/dns/query.py
index 9ed51b7f..8eeadbb6 100644
--- a/dns/query.py
+++ b/dns/query.py
@@ -568,7 +568,7 @@ def tls(q, where, timeout=None, port=853, af=None, source=None, source_port=0,
             s.bind(source)
         _connect(s, destination, expiration)
         if ssl_context is None:
-            ssl_context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
+            ssl_context = ssl.create_default_context()
         s = ssl_context.wrap_socket(s, do_handshake_on_connect=False)
         while True:
             try: