Comment 3 for bug 1963834

... And while looking for what exactly to suggest upstream, I realized that GitHub search only prints out the first match in a given file, which mean I missed the config options part of https://www.openssl.org/docs/man3.0/man3/SSL_CONF_cmd_value_type.html (search for UnsafeLegacyServerConnect), which, combined with https://www.openssl.org/docs/man3.0/man5/config.html makes me think the following snippet should work, assuming the Python modules actually loads the config file:

[ssl_configuration]
 client = client_tls_config

 [client_tls_config]
 Options = UnsafeLegacyServerConnect

This is completely untested though :)