# TLS 1.2 not enabled?

**URL:** <https://forum.yunohost.org/t/tls-1-2-not-enabled/21630>\
**Category:** Support\
**Tags:** english\
**Created:** [October 10, 2022, 4:26pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630 "2022-10-10T16:26:14Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 10, 2022, 4:26pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/1 "2022-10-10T16:26:14Z")

</div>

**Hardware:** AMD64

**YunoHost version:** 11.0.9.913 (stable).

**I have access to my server :** yes

**Are you in a special context or did you perform some particular tweaking on your YunoHost instance ?** : no

**Description:**

Is it true that TLS 1.2 is not enabled? Because I need to do some API stuff to a few of my websites… But, these are failing and most likely due to that issue, if so how can I enable it?

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [October 10, 2022, 4:33pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/2 "2022-10-10T16:33:15Z")

</div>

… TLS 1.2 is definitely enabled … It would help if you actually explained what you are trying to achieve, and what actually makes you think that this is the issue …

> **[The XY Problem](https://xyproblem.info/)**
>
> Asking about your attempted solution rather than your actual problem

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 10, 2022, 4:44pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/3 "2022-10-10T16:44:17Z")

</div>

> [@Aleks](#):
>
> … TLS 1.2 is definitely enabled … It would help if you actually explained what you are trying to achieve, and what actually makes you think that this is the issue …
> 
> [https://xyproblem.info/](https://xyproblem.info/)

Please don’t shoot the messenger in this case! We used to have an API between our web shop and our accountancy software, it used to work before, but now it doesn’t. The company which created the accountancy software are the ones which told me that they found out about it, so I will inform them about the fact that they are wrong, and ask them how they found out…

---

<div class="post-metadata">

**Author:** ![ericg](https://forum.yunohost.org/user_avatar/forum.yunohost.org/ericg/32/1543_2.png) [@ericg](https://forum.yunohost.org/u/ericg)\
**Post date:** [October 10, 2022, 8:36pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/4 "2022-10-10T20:36:12Z")

</div>

This reminds me an issue in Rocket.Chat involving [security setting](https://yunohost.org/en/security#change-cipher-compatibili) for NGINX set to “modern”…

> <https://github.com/YunoHost-Apps/rocketchat_ynh/issues/155#issuecomment-1268210632>
>
> Hi there,
> 
> RocketChat is working fine with Android and Linux on my yunohost wi…th all on latest version. Also the macOS works fine, but no chance to get it working on iOS.
> 
> After inserting my credentials and clicking on connect, nothing happens.
> 
> Is this something known, or is this a "special feature" on my yunohost install?
> 
> Regards,
> 
> Stefam

Maybe not related at all…

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 10, 2022, 9:29pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/5 "2022-10-10T21:29:05Z")

</div>

@Aleks can you confirm or deny this please?

---

<div class="post-metadata">

**Author:** ![Mamie](https://forum.yunohost.org/user_avatar/forum.yunohost.org/mamie/32/1245_2.png) [@Mamie](https://forum.yunohost.org/u/Mamie)\
**Post date:** [October 11, 2022, 8:42am UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/6 "2022-10-11T08:42:54Z")

</div>

Your favorite search engine \> TLS test \> your domain  
I just tried with [https://testtls.com/](https://testtls.com/) on my server and I do have TLS 1.2 enabled. (and 1.3 but not 1.0 and 1.1, but you should try with your own domain)

---

<div class="post-metadata">

**Author:** ![Kit](https://forum.yunohost.org/user_avatar/forum.yunohost.org/kit/32/1208_2.png) [@Kit](https://forum.yunohost.org/u/Kit)\
**Post date:** [October 11, 2022, 10:24am UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/8 "2022-10-11T10:24:50Z")

</div>

What is the output of `sudo yunohost settings get security.nginx.compatibility` ?

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 11, 2022, 11:13am UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/9 "2022-10-11T11:13:06Z")

</div>

> [@Kit](#):
>
> `sudo yunohost settings get security.nginx.compatibility` ?

```auto
modern

```

---

<div class="post-metadata">

**Author:** ![ericg](https://forum.yunohost.org/user_avatar/forum.yunohost.org/ericg/32/1543_2.png) [@ericg](https://forum.yunohost.org/u/ericg)\
**Post date:** [October 11, 2022, 11:17am UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/10 "2022-10-11T11:17:49Z")

</div>

`sudo yunohost settings set security.nginx.compatibility -v intermediate`  
should solve your issue.

---

<div class="post-metadata">

**Author:** ![Kit](https://forum.yunohost.org/user_avatar/forum.yunohost.org/kit/32/1208_2.png) [@Kit](https://forum.yunohost.org/u/Kit)\
**Post date:** [October 11, 2022, 11:25am UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/11 "2022-10-11T11:25:49Z")

</div>

Yes, you should have read ericg previous link : with `modern` argument, you disable TLSv1.2, which can cause trouble with Android \< 9 and “old” web-browsers.

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 11, 2022, 12:04pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/12 "2022-10-11T12:04:39Z")

</div>

> [@ericg](#):
>
> sudo yunohost settings set security.nginx.compatibility -v intermediate

But we don’t care so much about android and older browsers, sure we want compatibility but rather not over security and besides who is even using android lower than 10 from, the Stone Age or Netscape or whatever version of IE, these days?

But oke job done it worked.

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 11, 2022, 12:09pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/13 "2022-10-11T12:09:30Z")

</div>

This post had some, stuff in there which i don’t like to be preserved. But it showed the test results and TLS 1.2 was indeed disabled.

THANK YOU ALL! Again now I made the work of doing accountancy obsolete, the API will do that for me now.

So my Shop which I showed of in an earlier post, will be completely automated from adding the products to doing the tax declaration every step in between is never ever being touched by a human again ;-). Now I can finally kick out the accountant which costed me too much. It’s just another job taken over by machines. And maybe one day we only have to wake up and sleep again, since everything in between is not even done by humans anymore… Since fiction is now, becoming the truth!

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [October 11, 2022, 4:34pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/14 "2022-10-11T16:34:52Z")

</div>

> [@someonesusername](#):
>
> And maybe one day we only have to wake up and sleep again, since everything in between is not even done by humans anymore… Since fiction is now, becoming the truth!

Ah yes, good old [`fullyautomatedluxurycommunism_ynh`](https://en.wikipedia.org/wiki/Fully_Automated_Luxury_Communism) Yunohost app !

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 11, 2022, 5:06pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/15 "2022-10-11T17:06:25Z")

</div>

Look at you @Aleks, you are already having the time to read a book now? Must be so nice to be able to do such a thing.

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [October 11, 2022, 5:47pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/16 "2022-10-11T17:47:24Z")

</div>

Bold of you to assume that I read more than the first paragraph of the Wikipedia page 😛

---

<div class="post-metadata">

**Author:** ![someonesusername](https://forum.yunohost.org/user_avatar/forum.yunohost.org/someonesusername/32/5789_2.png) [@someonesusername](https://forum.yunohost.org/u/someonesusername)\
**Post date:** [October 11, 2022, 6:14pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/17 "2022-10-11T18:14:20Z")

</div>

I just hoped for it, but hope is the enemy of reality… Should have known better, I’m sorry. ☹

---

<div class="post-metadata">

**Author:** ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)\
**Post date:** [November 10, 2022, 6:15pm UTC](https://forum.yunohost.org/t/tls-1-2-not-enabled/21630/18 "2022-11-10T18:15:00Z")

</div>

Closed on November 10, 2022, 6:15pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
