From f9476e0b68a4d4fb36ffa062f731fa81e7962ce8 Mon Sep 17 00:00:00 2001
From: Jonathan Garcia <116393282+joga84@users.noreply.github.com>
Date: Wed, 17 Jun 2026 11:58:10 +0200
Subject: [PATCH] replace ssl.wrap_socket with context.wrap_socket

python 3.12 and later no longer have ssl.wrap_socket, create ssl.create_default_context and use context.wrap_socket instead.
---
 eppy/client.py | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/eppy/client.py b/eppy/client.py
index e856911..cc9fb02 100644
--- a/eppy/client.py
+++ b/eppy/client.py
@@ -77,12 +77,12 @@ def connect(self, host=None, port=None, address_family=None):
                        local_addr, local_port, self.sock.getpeername()[0], port)
         self.sock.settimeout(self.socket_timeout)  # regular timeout
         if self.ssl_enable:
-            self.sock = ssl.wrap_socket(self.sock, self.keyfile, self.certfile,
-                                        ssl_version=self.ssl_version,
-                                        ciphers=self.ssl_ciphers,
-                                        server_side=False,
-                                        cert_reqs=self.cert_required,
-                                        ca_certs=self.cacerts)
+            context = ssl.create_default_context()
+            context.load_verify_locations(self.cacerts)
+            context.load_cert_chain(self.certfile, self.keyfile)
+            context.check_hostname = self.validate_hostname
+            context.verify_mode = self.cert_required
+            self.sock = context.wrap_socket(self.sock, server_hostname=host, server_side=False)
             self.log.debug('%s negotiated with local=%s:%s remote=%s:%s', self.sock.version(),
                            local_addr, local_port, self.sock.getpeername()[0], port)
             if self.validate_hostname: