Page 1 of 1

How to enable only TLS 1.3 and disable other versions?

Posted: Mon Nov 30, 2020 11:27 am
by eraytufan
Hi all,

I want to enable TLS 1.3 and disable all the other TLS versions. I have created a certificate and when I try the connection on the client, I can have a handshake using different TLS versions like TLS 1.2 or TLS 1.3. However I don't want client to have a handshake using TLS 1.2 or lower versions. So how can I disable all the other versions of TLS except TLS 1.3 or force the client to use TLS 1.3?

P.S. I tried updating openssl.cnf file, and added a property 'MinProtocol = TLSv1.3' but unfortunately it was not successful.

Thank you in advance.

Re: How to enable only TLS 1.3 and disable other versions?

Posted: Mon Dec 14, 2020 8:01 am
by Andorhal
Hello.
TLS 1.3 is not yet supported in WinCC OA, we are looking into this for the next WinCC OA Version.
Best regards.