How to disable TLS 1.3 in OpenSSL 1.1.1

Hal Murray hmurray at
Thu Mar 21 06:14:32 UTC 2019

> But I want to use TLS 1.2 only for my application with curl 7.58 in Ubuntu
> 18.04. So while using openssl 1.1.1 how to disable default TLS 1.3 and how
> to enable TLS 1.2? 

Just curious.  Why do you want to disable TLS 1.3?  It will automagically use 
1.2 if that's all the other end supports.  Why not use 1.3 if both ends 
support it?

> Can I set any flags while building openssl 1.1.1 to disable TLS 1.3 or can
> i get any package from ubuntu to disable TLS 1.3 ? 

You can do it at run time using SSL_set_max_proto_version

These are my opinions.  I hate spam.

More information about the openssl-users mailing list