Skip to main content

How to enable TLS 1.3 in the Apache Global Configuration?

Adam Saad
  • Updated

Introduction

 

Currently, cPanel & WHM support Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3

 

TLS 1.3 is one of the latest encryption protocols and is the successor of TLS version 1.2.

 

TLS version 1.2 is still in use along with version 1.3. TLS version 1.0 and 1.1 have been deprecated in 2020. With that being said, TLS 1.1 & 1.0 support is disabled by default on a new cPanel & WHM installation, with only TLS 1.2 remains active. 

 

 

Procedure

The steps are as follows;

  1. You will need to access your WHM using your (root) user to get to the following location WHM Home-> Service Configuration -> Apache Configuration -> Global Configuration.

  2. Under Apache Configuration, you will update the SSL/TLS Protocols field and enter: All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3

  3. You will then select the Save button at the bottom of the page.

  4. Make sure to Rebuild Configuration and Restart Apache button to apply the TLS changes. cPanel & WHM will rebuild the Apache configuration and restart it.

 

Once you have saved these settings, you will be able to test via the following 3rd Party tool; https://www.ssllabs.com/ssltest/.

 

More details about TLS 1.3 can be found here; https://datatracker.ietf.org/doc/html/rfc8446.

Related articles