# TLS minVersion: VersionTLS10 has no effect

**URL:** <https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279>\
**Category:** Traefik v2\
**Tags:** letsencrypt-acme, file, docker\
**Created:** [February 6, 2020, 12:16pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279 "2020-02-06T12:16:19Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![setiseta](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/setiseta/32/1550_2.png) [@setiseta](https://community.traefik.io/u/setiseta)\
**Post date:** [February 6, 2020, 12:16pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/1 "2020-02-06T12:16:19Z")

</div>

As default on traefik 2 (v2.1.2) there is TLS1.2 enabled.  
As i need tls1.0 for the moment, i tried to overwrite it with the following dynamic config:

```auto
# Dynamic configuration
tls:
  options:
    default:
      minVersion: VersionTLS10

```

but even if i restart traefik with this, tls1.0 is not enabled

is there something i forgot to change?

---

<div class="post-metadata">

**Author:** ![cakiwi](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/cakiwi/32/3205_2.png) [@cakiwi](https://community.traefik.io/u/cakiwi)\
**Post date:** [February 6, 2020, 4:06pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/2 "2020-02-06T16:06:29Z")

</div>

On v2.1.3 using TLS defaults I can connect using TLSv1, TLSv1\_1, TLSv1\_2 and TLSv1\_3.

How are you testing? `curl --tlsv1.0` for my test did not work. `openssl s_client --tlsv1` and `sslyze --tlsv1` worked.

---

<div class="post-metadata">

**Author:** ![setiseta](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/setiseta/32/1550_2.png) [@setiseta](https://community.traefik.io/u/setiseta)\
**Post date:** [February 6, 2020, 4:43pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/3 "2020-02-06T16:43:40Z")

</div>

I've run an ssl Labs test.

---

<div class="post-metadata">

**Author:** ![cakiwi](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/cakiwi/32/3205_2.png) [@cakiwi](https://community.traefik.io/u/cakiwi)\
**Post date:** [February 6, 2020, 7:05pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/4 "2020-02-06T19:05:34Z")

</div>

Weird. I just did one on v2.0.5 tls options are default . TLS v1.0 thru 1.3 are all connecting.

Are you doing anything else with tls options like defining ciphers or using an elliptic curve key or ... anything?

---

<div class="post-metadata">

**Author:** ![setiseta](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/setiseta/32/1550_2.png) [@setiseta](https://community.traefik.io/u/setiseta)\
**Post date:** [February 6, 2020, 7:51pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/5 "2020-02-06T19:51:07Z")

</div>

There were some cipher definitions, but i disabled them to test the TLS Version.  
Maybe its a problem from later Versions? I'm on 2.1.2

---

<div class="post-metadata">

**Author:** ![ldez](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/ldez/32/5_2.png) [@ldez](https://community.traefik.io/u/ldez)\
**Post date:** [February 6, 2020, 11:08pm UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/6 "2020-02-06T23:08:31Z")

</div>

Could you provide all your configuration (static and dynamic file, docker-compose file, etc.)

---

<div class="post-metadata">

**Author:** ![cakiwi](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/cakiwi/32/3205_2.png) [@cakiwi](https://community.traefik.io/u/cakiwi)\
**Post date:** [February 7, 2020, 12:41am UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/7 "2020-02-07T00:41:42Z")

</div>

From my earlier post it works on 2.1.3, and my later post 2.0.5.

The 2.1.3 version I later used minVersion and ciphers to prepare for tls1 - tls1.1 deprecation and ciphers to only provide PFS. Before that it was a solid B on Ssllabs.

Best of luck.

---

<div class="post-metadata">

**Author:** ![setiseta](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/setiseta/32/1550_2.png) [@setiseta](https://community.traefik.io/u/setiseta)\
**Post date:** [February 7, 2020, 6:17am UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/8 "2020-02-07T06:17:11Z")

</div>

I've retested and now it works. thank you alot.  
I've found the problem.  
I set TLS1.2 Ciphers in tls.default option, and tried to downgrade tls version with another option, but I've not set ciphers matching the tls version there.  
so it used the ciphers from the default option i think. and so tls1.0 and 1.1 was not working.

thank you again for the help.

---

<div class="post-metadata">

**Author:** ![contractorsagourahil](https://avatars.discourse-cdn.com/v4/letter/c/0ea827/32.png) [@contractorsagourahil](https://community.traefik.io/u/contractorsagourahil)\
**Post date:** [November 10, 2020, 10:45am UTC](https://community.traefik.io/t/tls-minversion-versiontls10-has-no-effect/4279/9 "2020-11-10T10:45:54Z")

</div>

Can you provide all of the configuration files? I'll be very grateful for this favor.  
Regards: [Home Addition Agoura Hills](http://www.contractorsagourahills.com/additions.html).