Ensure safe defaults for TLS

Signed-off-by: Salvatore Mesoraca <[email protected]>

Author: aiven-sal

valkey/connection.py

@@ -846,7 +846,9 @@ def _wrap_socket_with_ssl(self, sock):
             context.load_verify_locations(
                 cafile=self.ca_certs, capath=self.ca_path, cadata=self.ca_data
             )
-        if self.ssl_min_version is not None:
+        if self.ssl_min_version is None:
+            context.minimum_version = ssl.TLSVersion.TLSv1_2
+        else:
             context.minimum_version = self.ssl_min_version
         if self.ssl_ciphers:
             context.set_ciphers(self.ssl_ciphers)