# Disable TLS 1.0 and 1.1

**URL:** <https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083>\
**Category:** Configuring the server\
**Created:** [August 25, 2022, 3:21am UTC](https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083 "2022-08-25T03:21:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gbkf](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/gbkf/32/6428_2.png) [@gbkf](https://forum.keycloak.org/u/gbkf)\
**Post date:** [August 25, 2022, 3:21am UTC](https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083/1 "2022-08-25T03:21:03Z")

</div>

Using keycloak 18 with quarkus and having trouble figuring out how to disable TLS v1.0 and v1.1. Thought perhaps setting the configuration option: https-protocols=TLSv1.3,TLSv1.2 but that doesn’t disable tls 1.0 and 1.1.

Is there a way to specifically disable https protocols?

---

<div class="post-metadata">

**Author:** ![gsmith](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/gsmith/32/294_2.png) [@gsmith](https://forum.keycloak.org/u/gsmith)\
**Post date:** [August 26, 2022, 4:01am UTC](https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083/2 "2022-08-26T04:01:45Z")

</div>

Hello,

If your using keycloak 18 with quarkus

> By default, Keycloak does not enable deprecated TLS protocols. If your client supports only deprecated protocols, consider upgrading the client. To also allow TLSv1.2, use a command such as the following:

`kc.sh start --https-protocols=TLSv1.3,TLSv1.2.`

> **[Configuring TLS - Keycloak](https://www.keycloak.org/server/enabletls#:~:text=password%20is%20used.-,Configuring%20TLS%20protocols,-By%20default%2C%20Keycloak)**
>
> Keycloak is an open source identity and access management solution

---

<div class="post-metadata">

**Author:** ![gbkf](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/gbkf/32/6428_2.png) [@gbkf](https://forum.keycloak.org/u/gbkf)\
**Post date:** [August 26, 2022, 4:24am UTC](https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083/3 "2022-08-26T04:24:47Z")

</div>

I’ve not set Keycloak to use TLS 1.0 or 1.1. The only change made has been enabling https and it has those deprecated TLS protocols enabled with seemingly no way to turn off. Confirmed they were enabled by running the Qualys SSlLabs check against keycloak and it showed tls 1.0 and 1.1 were enabled.

---

<div class="post-metadata">

**Author:** ![gsmith](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/gsmith/32/294_2.png) [@gsmith](https://forum.keycloak.org/u/gsmith)\
**Post date:** [August 26, 2022, 4:38am UTC](https://forum.keycloak.org/t/disable-tls-1-0-and-1-1/17083/4 "2022-08-26T04:38:25Z")

</div>

> [@gbkf](#):
>
> keycloak and it showed tls 1.0 and 1.1 were enabled.

You sure that Keycloak was running those? As I posted above it will not unless specified. If so, it maybe be a bug. You can look here.

- [Issues · keycloak/keycloak · GitHub](https://github.com/keycloak/keycloak/issues)