Can't seem to enable TLS1.3

@rg305 Setting SSLProtocol -all TLSv1.2 and SSLProtocol -all TLSv1.3 with my other default TLS settings elsewhere it works nicely. Setting -tls1_1 or -tls1_3 on the OpenSSL s_client command line results in a failure when connecting to the Apache TLSv1.2 VirtualHost (as expected), but not with -tls1_2. Same goes for the TLSv1.3 VirtualHost, but obviously failures with -tls1_1 and -tls1_2 but not with -tls1_3.

It seems TLSv1 and TLSv1.1 don't play very well with my other TLS settings. Added the "Old" Mozilla SSL Generator SSLCipherSuite directive to those two specific VirtualHost blocks and gee, what'll you know, it works now. TLS1.0 and TLS1.1 only VirtualHost, working like a charm. Not effecting any other VirtualHosts at all.

2 Likes