How to enable only TLS 1.3 and disable other versions?

eraytufan · Post by **eraytufan** » Mon Nov 30, 2020 11:27 am

Hi all,

I want to enable TLS 1.3 and disable all the other TLS versions. I have created a certificate and when I try the connection on the client, I can have a handshake using different TLS versions like TLS 1.2 or TLS 1.3. However I don't want client to have a handshake using TLS 1.2 or lower versions. So how can I disable all the other versions of TLS except TLS 1.3 or force the client to use TLS 1.3?

P.S. I tried updating openssl.cnf file, and added a property 'MinProtocol = TLSv1.3' but unfortunately it was not successful.

Thank you in advance.

Andorhal · Post by **Andorhal** » Mon Dec 14, 2020 8:01 am

Hello.
TLS 1.3 is not yet supported in WinCC OA, we are looking into this for the next WinCC OA Version.
Best regards.

Security