# Keycloak and TLS1.3 **URL:** \ **Category:** Miscellanaeous\ **Created:** [May 3, 2021, 1:02pm UTC](https://forum.keycloak.org/t/keycloak-and-tls1-3/8856 "2021-05-03T13:02:10Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![itai](https://avatars.discourse-cdn.com/v4/letter/i/278dde/32.png) [@itai](https://forum.keycloak.org/u/itai)\ **Post date:** [May 3, 2021, 1:02pm UTC](https://forum.keycloak.org/t/keycloak-and-tls1-3/8856/1 "2021-05-03T13:02:11Z")
Hey, Is there a way to make Keycloak work with tls1.3? Is it supported? ---
**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\ **Post date:** [May 3, 2021, 3:23pm UTC](https://forum.keycloak.org/t/keycloak-and-tls1-3/8856/2 "2021-05-03T15:23:15Z")
Keycloak doesn’t have a problem with TLS 1.3, but used infrastructure may have - e.g. you are running Keycloak on old Java and that Java version doesn’t support then of course Keycloak can’t support TLS 1.3. Also you may have TLS/SSL offloading on the loadbalancer in front of Keycloak, then it depends on used LB, which TLS is supported - again nothing related to Keycloak. So it really depends how you have implemented TLS. Generally: use loadbalancer in front of Keycloak with TLS offloading and configure required TLS policy (allowed min/max TLS version, allowed ciphers, preference of server/client cipher order, …) there. ---
**Author:** ![itai](https://avatars.discourse-cdn.com/v4/letter/i/278dde/32.png) [@itai](https://forum.keycloak.org/u/itai)\ **Post date:** [May 3, 2021, 6:12pm UTC](https://forum.keycloak.org/t/keycloak-and-tls1-3/8856/3 "2021-05-03T18:12:02Z")
Thanks for the answer! I’m using the docker image jboss/keycloak:9.0.0, which uses java 11. when forcing curl to use tls1.3 I get refused with > - TLSv1.3 (IN), TLS alert, protocol version (582): > - error:1409442E:SSL routines:ssl3\_read\_bytes:tlsv1 alert protocol version