Skip to main content
Commonmark migration
Source Link

Cert will work fine with any SSL/TLS version. Run Test to make sure.

#Cert will work fine with any SSL/TLS version. Run Test to make sure. ThereThere is no such thing as a "TLS 1.2 certificate". (It'll be an "X 509 v3" certificate.) And it'll support any existing SSL/TLS version. You'll be fine.

will the web server drop down to TLS 1.0 or 1.1 if it determines that a given client is not capable of negotiating TLS 1.2?

Yes, if you configure your web server to support more than one protocol version, then the version negotiation will settle for the highest version supported by both client and server.

But to make sure just run your site through the SSL Labs tester: https://www.ssllabs.com/ssltest/

#Cert will work fine with any SSL/TLS version. Run Test to make sure. There is no such thing as a "TLS 1.2 certificate". (It'll be an "X 509 v3" certificate.) And it'll support any existing SSL/TLS version. You'll be fine.

will the web server drop down to TLS 1.0 or 1.1 if it determines that a given client is not capable of negotiating TLS 1.2?

Yes, if you configure your web server to support more than one protocol version, then the version negotiation will settle for the highest version supported by both client and server.

But to make sure just run your site through the SSL Labs tester: https://www.ssllabs.com/ssltest/

Cert will work fine with any SSL/TLS version. Run Test to make sure.

There is no such thing as a "TLS 1.2 certificate". (It'll be an "X 509 v3" certificate.) And it'll support any existing SSL/TLS version. You'll be fine.

will the web server drop down to TLS 1.0 or 1.1 if it determines that a given client is not capable of negotiating TLS 1.2?

Yes, if you configure your web server to support more than one protocol version, then the version negotiation will settle for the highest version supported by both client and server.

But to make sure just run your site through the SSL Labs tester: https://www.ssllabs.com/ssltest/

Source Link
StackzOfZtuff
  • 18.2k
  • 1
  • 54
  • 86

#Cert will work fine with any SSL/TLS version. Run Test to make sure. There is no such thing as a "TLS 1.2 certificate". (It'll be an "X 509 v3" certificate.) And it'll support any existing SSL/TLS version. You'll be fine.

will the web server drop down to TLS 1.0 or 1.1 if it determines that a given client is not capable of negotiating TLS 1.2?

Yes, if you configure your web server to support more than one protocol version, then the version negotiation will settle for the highest version supported by both client and server.

But to make sure just run your site through the SSL Labs tester: https://www.ssllabs.com/ssltest/