how to enable TLS 1.2 & 1.3 in netgate 1100

[thomasyang]

Hi guys, may I know how to enable TLS 1.2 & 1.3 in netgate 1100? heard TLS v1.3 is enabled by default, but wonder how to ensure both TLS 13.& 1.3 is enabled. thanks

[jimp]

The GUI uses 1.2 and 1.3 by default on the current version. Why is it you need to change or restrict this? There are no user options for it.

/var/etc/nginx-webConfigurator.conf:		ssl_protocols   TLSv1.2 TLSv1.3;

The captive portal web server config also allows 1.1 because it needs to accept connections from a wider range of clients, such as older clients.

If you are using something like haproxy it has its own mechanisms for changing or limiting TLS versions.