maybe this works?

Author: sleepyStick

pymongo/asynchronous/encryption.py

@@ -165,6 +165,7 @@ async def kms_request(self, kms_context: MongoCryptKmsContext) -> None:
 
         :return: None
         """
+        self.opts._parse_kms_tls_options(_IS_SYNC)
         endpoint = kms_context.endpoint
         message = kms_context.message
         provider = kms_context.kms_provider
@@ -675,8 +676,8 @@ def __init__(
             key_vault_namespace,
             kms_tls_options=kms_tls_options,
             key_expiration_ms=key_expiration_ms,
-            is_sync=_IS_SYNC,
         )
+        opts._parse_kms_tls_options(_IS_SYNC)
         self._io_callbacks: Optional[_EncryptionIO] = _EncryptionIO(
             None, key_vault_coll, None, opts
         )

pymongo/encryption_options.py

@@ -58,7 +58,6 @@ def __init__(
         bypass_query_analysis: bool = False,
         encrypted_fields_map: Optional[Mapping[str, Any]] = None,
         key_expiration_ms: Optional[int] = None,
-        is_sync: bool = True,
     ) -> None:
         """Options to configure automatic client-side field level encryption.
 
@@ -237,10 +236,14 @@ def __init__(
         if not any("idleShutdownTimeoutSecs" in s for s in self._mongocryptd_spawn_args):
             self._mongocryptd_spawn_args.append("--idleShutdownTimeoutSecs=60")
         # Maps KMS provider name to a SSLContext.
-        self._kms_ssl_contexts = _parse_kms_tls_options(kms_tls_options, is_sync)
+        self._kms_tls_options = kms_tls_options
+        # self._kms_ssl_contexts = _parse_kms_tls_options(kms_tls_options, is_sync)
         self._bypass_query_analysis = bypass_query_analysis
         self._key_expiration_ms = key_expiration_ms
 
+    def _parse_kms_tls_options(self, is_sync):
+        self._kms_ssl_contexts = _parse_kms_tls_options(self._kms_tls_options, is_sync)
+
 
 class RangeOpts:
     """Options to configure encrypted queries using the range algorithm."""

pymongo/synchronous/encryption.py

@@ -164,6 +164,7 @@ def kms_request(self, kms_context: MongoCryptKmsContext) -> None:
 
         :return: None
         """
+        self.opts._parse_kms_tls_options(_IS_SYNC)
         endpoint = kms_context.endpoint
         message = kms_context.message
         provider = kms_context.kms_provider
@@ -668,8 +669,8 @@ def __init__(
             key_vault_namespace,
             kms_tls_options=kms_tls_options,
             key_expiration_ms=key_expiration_ms,
-            is_sync=_IS_SYNC,
         )
+        opts._parse_kms_tls_options(_IS_SYNC)
         self._io_callbacks: Optional[_EncryptionIO] = _EncryptionIO(
             None, key_vault_coll, None, opts
         )

test/asynchronous/test_client_bulk_write.py

@@ -545,7 +545,6 @@ async def test_returns_error_if_auto_encryption_configured(self):
         opts = AutoEncryptionOpts(
             key_vault_namespace="db.coll",
             kms_providers={"aws": {"accessKeyId": "foo", "secretAccessKey": "bar"}},
-            is_sync=_IS_SYNC,
         )
         client = await self.async_rs_or_single_client(auto_encryption_opts=opts)