Disabling TLS 1.0 and TLS 1.1

[rg305]

@dw21677

So, how can you disable TLS 1.0 and TLS 1.1, but still get configuration updates from Certbot?

In Apache, search through your configuration files for "SSLProtocol".
Set it to:
SSLProtocol +TLSv1.2
[and restart Apache]

This change will not break certbot updates.