# Configuring both TLS 1.2 and TLS 1.3 in Logstash 8.8

**URL:** <https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280>\
**Category:** Logstash\
**Created:** [November 2, 2023, 10:31am UTC](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280 "2023-11-02T10:31:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Manal\_A](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/manal_a/32/123992_2.png) [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Post date:** [November 2, 2023, 10:31am UTC](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280/1 "2023-11-02T10:31:26Z")

</div>

In my Logstash8.8 syslog configuration file, I want to configure two TLS versions: TLS 1.2 and TLS 1.3, but it doesn't work. Can you provide the correct way to configure it? Should I create two separate inputs?

tcp {  
id =\> tcp\_cds\_syslog\_tls\_6516  
port =\> 6516  
codec =\> plain {  
charset =\> "US-ASCII"  
}  
ssl\_enable =\> true  
ssl\_supported\_protocols =\> "TLSv1.2"  
ssl\_key =\> "/data/logstash/certs/log\_key.pem"  
ssl\_cert =\> "/data/logstash/certs/log\_cert.pem"  
#ssl\_cipher\_suites =\> ["TLS\_AES\_256\_GCM\_SHA384", "TLS\_AES\_128\_GCM\_SHA256", "TLS\_CHACHA20\_POLY1305\_SHA256"]  
ssl\_certificate\_authorities =\> ["/data/logstash/certs/log\_ca.pem"]  
ssl\_verify =\> true  
}

Thank you

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 2, 2023, 12:37pm UTC](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280/2 "2023-11-02T12:37:10Z")

</div>

> [@Manal\_A](#):
>
> I want to configure two TLS versions: TLS 1.2 and TLS 1.3, but it doesn't work.

What is not working? You didn't share any error log.

You shouldn't change anything, the default for the TCP input is to use TLS v1.2 and TLS v1.3 as you can check in the [documentation](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-tcp.html#plugins-inputs-tcp-ssl_supported_protocols).

Since you are not on the last version, I'm not sure if on version 8.8 it already uses that.

But to set it just use:

```auto
ssl_supported_protocols => ['TLSv1.2', 'TLSv1.3']

```

Also, are you using the bundled jdk or another jdk?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 30, 2023, 12:38pm UTC](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280/3 "2023-11-30T12:38:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.