# TLS v1.3 support

**URL:** <https://forum.keycloak.org/t/tls-v1-3-support/14943>\
**Category:** Getting advice\
**Created:** [April 13, 2022, 5:17am UTC](https://forum.keycloak.org/t/tls-v1-3-support/14943 "2022-04-13T05:17:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![abhilashkumar002](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/abhilashkumar002/32/5581_2.png) [@abhilashkumar002](https://forum.keycloak.org/u/abhilashkumar002)\
**Post date:** [April 13, 2022, 5:17am UTC](https://forum.keycloak.org/t/tls-v1-3-support/14943/1 "2022-04-13T05:17:23Z")

</div>

How can we configure keycloak to support TLS v1.3?

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [April 13, 2022, 7:22am UTC](https://forum.keycloak.org/t/tls-v1-3-support/14943/2 "2022-04-13T07:22:17Z")

</div>

I would say you need Java with TLS 1.3 support first and then it should be running without any special Keycloak configuration.

---

<div class="post-metadata">

**Author:** ![abhilashkumar002](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/abhilashkumar002/32/5581_2.png) [@abhilashkumar002](https://forum.keycloak.org/u/abhilashkumar002)\
**Post date:** [April 13, 2022, 4:24pm UTC](https://forum.keycloak.org/t/tls-v1-3-support/14943/3 "2022-04-13T16:24:20Z")

</div>

Thanks for your comment on it.  
I am running java with following version:

I have no name!@8f1e7925cb67:/$ java --version  
openjdk 11.0.14 2022-01-18 LTS  
OpenJDK Runtime Environment (build 11.0.14+9-LTS)  
OpenJDK 64-Bit Server VM (build 11.0.14+9-LTS, mixed mode)

Could you suggest how can we check the support or whicj java verson is required for that.  
Really appriciate you response.

Thank you

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [April 13, 2022, 8:10pm UTC](https://forum.keycloak.org/t/tls-v1-3-support/14943/4 "2022-04-13T20:10:34Z")

</div>

```auto
$ cat ShowTlsVersions.java
import javax.net.ssl.SSLContext;

public class ShowTlsVersions {
    public static void main(String[] args) {
      try {
        System.out.println(String.join(" ", SSLContext.getDefault().getSupportedSSLParameters().getProtocols()));
      } catch (Exception e) {
        System.out.println(e.getMessage());
      }
    }
}

$ java ShowTlsVersions.java
TLSv1.3 TLSv1.2 TLSv1.1 TLSv1 SSLv3 SSLv2Hello

$ java -version
openjdk version "11.0.14.1" 2022-02-08
OpenJDK Runtime Environment (build 11.0.14.1+1-Ubuntu-0ubuntu1.20.04)
OpenJDK 64-Bit Server VM (build 11.0.14.1+1-Ubuntu-0ubuntu1.20.04, mixed mode, sharing)

```

Of course if Keycloak is behind loadbalancer, reverse proxy then they should handle TLS.