# Disable TLSv1.0

**URL:** https://community.letsencrypt.org/t/disable-tlsv1-0/76156
**Category:** Server
**Created:** [October 30, 2018, 2:49pm UTC](https://community.letsencrypt.org/t/disable-tlsv1-0/76156 "2018-10-30T14:49:19Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Abdelrahman](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@Abdelrahman](https://community.letsencrypt.org/u/Abdelrahman)
#### Post date: [October 30, 2018, 2:49pm UTC](https://community.letsencrypt.org/t/disable-tlsv1-0/76156/1 "2018-10-30T14:49:19Z")

</div>

How can I manage to disable TLSv1.0 protocol in Apache?

---

<div class="post-metadata">

### Author: ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)
#### Post date: [October 30, 2018, 3:07pm UTC](https://community.letsencrypt.org/t/disable-tlsv1-0/76156/2 "2018-10-30T15:07:30Z")

</div>

Hi @Abdelrahman,

You should find the `SSLProtocol` directive in your conf file and use only the protocols you want/need.

Use this command to find the file containing the directive:

`grep -ri SSLProtocol /path/to/your/apache/conf/dir/`

In Debian based distributions you should use:

`grep -ri SSLProtocol /etc/apache2/`

In CentOS:

`grep -ri SSLProtocol /etc/httpd/`

Once you know where is the directive, edit the file and you should see something like this:

`SSLProtocol all -SSLv3`

If you only want to use TLSv1.1 and TLSv1.2 use this (note that TLSv1 actually means TLSv1.0):

`SSLProtocol all -SSLv3 -TLSv1`

or

`SSLProtocol TLSv1.1 TLSv1.2`

Once you changed the conf file, restart Apache to apply the changes.

Cheers,  
sahsanu

---

<div class="post-metadata">

### Author: ![jsha](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jsha/32/12_2.png) [@jsha](https://community.letsencrypt.org/u/jsha)
#### Post date: [October 30, 2018, 5:33pm UTC](https://community.letsencrypt.org/t/disable-tlsv1-0/76156/3 "2018-10-30T17:33:59Z")

</div>

@sahsanu’s reply is excellent. You may also be interested in this page from Mozilla documenting good choices of cipher suites: [https://wiki.mozilla.org/Security/Server\_Side\_TLS#Recommended\_configurations](https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations)

And this tool that can generate configurations for you: [https://mozilla.github.io/server-side-tls/ssl-config-generator/](https://mozilla.github.io/server-side-tls/ssl-config-generator/)

---

<div class="post-metadata">

### Author: ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)
#### Post date: [November 29, 2018, 5:36pm UTC](https://community.letsencrypt.org/t/disable-tlsv1-0/76156/4 "2018-11-29T17:36:16Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.