# How to only enable TLS1.1 or TLS1.2 only

**URL:** <https://www.ruby-forum.com/t/how-to-only-enable-tls1-1-or-tls1-2-only/222281>\
**Category:** NGINX\
**Created:** [August 21, 2012, 10:07am UTC](https://www.ruby-forum.com/t/how-to-only-enable-tls1-1-or-tls1-2-only/222281 "2012-08-21T10:07:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\
**Post date:** [August 21, 2012, 10:07am UTC](https://www.ruby-forum.com/t/how-to-only-enable-tls1-1-or-tls1-2-only/222281/1 "2012-08-21T10:07:22Z")

</div>

Hi all,

I want to only use TLS1.1 or above with the nginx. I searched on the  
Internet but there is only information about how to enable ssl/tls  
with the nginx. I can write

```
"ssl_protocols SSLv3 SSLv2 TLSv1;"

```

in the nginx.conf to enable sslv3,sslv2 and tlsv1.

So what can I do if I want to only enable tls1.1 or above?

Thanks!

---

<div class="post-metadata">

**Author:** ![SSS\_SSS\_SSSSS\_SSS](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/94ad74/32.png) [@SSS\_SSS\_SSSSS\_SSS](https://www.ruby-forum.com/u/SSS_SSS_SSSSS_SSS)\
**Post date:** [August 27, 2012, 2:01pm UTC](https://www.ruby-forum.com/t/how-to-only-enable-tls1-1-or-tls1-2-only/222281/2 "2012-08-27T14:01:39Z")

</div>

Please consult the docs:  
[http://nginx.org/en/docs/http/ngx\_http\_ssl\_module.html#ssl\_protocols](http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols)

Upgrade toat least1.1.13 and 1.0.12 and specify

ssl\_protocolsTLSv1.1 TLSv1.2;

* * *

---

<div class="post-metadata">

**Author:** ![SSS\_SSS\_SSSSS\_SSS](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/94ad74/32.png) [@SSS\_SSS\_SSSSS\_SSS](https://www.ruby-forum.com/u/SSS_SSS_SSSSS_SSS)\
**Post date:** [August 27, 2012, 2:04pm UTC](https://www.ruby-forum.com/t/how-to-only-enable-tls1-1-or-tls1-2-only/222281/3 "2012-08-27T14:04:30Z")

</div>

thank you very much!

2012/8/21 Lukas T. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid):