How to force Client to use a specific TLS version?

So basically im migrating from requests to httpx and i see i was forcing tlsv1_2 with requests HTTPadapter , but i dont think these is comp with httpx, i was wondering how i can force httpx to use specific tls version

from requests.adapters import HTTPAdapter
from urllib3.poolmanager import PoolManager
import ssl


class MyAdapter(HTTPAdapter):
    def init_poolmanager(self, connections, maxsize, block=False):
        self.poolmanager = PoolManager(num_pools=connections,
                                       maxsize=maxsize,
                                       block=block,
                                       ssl_version=ssl.PROTOCOL_TLSv1_2)



....



session = requests.session()
session.mount('https://', MyAdapter())

I was doing like these in requests

[sethmlarson]

So the way I’d recommend accomplishing this:

>>> import ssl
>>> import httpx
>>> ssl_config = httpx.SSLConfig()
>>> ssl_context = ssl_config.load_ssl_context()
>>> ssl_context.options |= getattr(ssl, "OP_NO_TLSv1_3", 0)
>>> client = httpx.Client(verify=ssl_context)
>>> resp = client.get("https://howsmyssl.com/a/check")
>>> print(resp.json()["tls_version"])
'TLSv1.2'

Currently we don’t allow passing an SSLConfig object to verify= (which maybe we should because this is painful)

[florimondmanca]

Thanks for opening. Since I believe TLS v1.2 is considered insecure, I suppose you were forcing 1.2 because the client you’re connecting to is exposing that version of TLS? If you don’t have such a requirement anymore I’d advocate in favor of using 1.3.

If you really need it though, there may be an undocumented API (most likely SSLConfig) that you could somehow override, but I can’t dig it out right now.