imageio: drop deprecated/removed ssl flags

The versioned SSL flags have been deprecated since Python 3.7.
Remove OP_NO_TLSv1 / OP_NO_TLSv1_1 and replace with the new methods to
define the minimum TLS version to be used.

Signed-off-by: Jean-Louis Dupond <jean-louis@dupond.be>

Author: dupondje

ovirt_imageio/_internal/ssl.py

@@ -9,19 +9,19 @@ def server_context(certfile, keyfile, cafile=None, enable_tls1_1=False):
     # TODO: Verify client certs
     ctx = ssl.create_default_context(
         purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile)
-    ctx.options |= ssl.OP_NO_TLSv1
+    ctx.minimum_version = ssl.TLSVersion.TLSv1_1
     if not enable_tls1_1:
-        ctx.options |= ssl.OP_NO_TLSv1_1
+        ctx.minimum_version = ssl.TLSVersion.TLSv1
     ctx.load_cert_chain(certfile, keyfile=keyfile)
     return ctx
 
 
 def client_context(cafile=None, enable_tls1_1=False):
     ctx = ssl.create_default_context(
         purpose=ssl.Purpose.SERVER_AUTH, cafile=cafile)
-    ctx.options |= ssl.OP_NO_TLSv1
+    ctx.minimum_version = ssl.TLSVersion.TLSv1_1
     if not enable_tls1_1:
-        ctx.options |= ssl.OP_NO_TLSv1_1
+        ctx.minimum_version = ssl.TLSVersion.TLSv1
     return ctx