# TLS v1.0 has been removed from default TLS/SSL protocols

**URL:** <https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [July 11, 2019, 6:13am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910 "2019-07-11T06:13:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![swapnali](https://avatars.discourse-cdn.com/v4/letter/s/b5a626/32.png) [@swapnali](https://discuss.elastic.co/u/swapnali)\
**Post date:** [July 11, 2019, 6:13am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910/1 "2019-07-11T06:13:26Z")

</div>

Hi,

I am trying to update elasticsearch from 6.7 to 7.0 i got warning from 7.0 assistant as below **TLS v1.0 has been removed from default TLS/SSL protocols**  
so in my elasticsearch.yml i have added below codeto remove this warning

**xpack.security.http.ssl.supported\_protocols: ["TLSv1.2", "TLSv1.1", "TLSv1"]**

But still warning shown in assistant 7.0 Please guide me.

**Refrerence**

[https://www.elastic.co/guide/en/elasticsearch/reference/7.0/breaking-changes-7.0.html#tls-v1-removed](https://www.elastic.co/guide/en/elasticsearch/reference/7.0/breaking-changes-7.0.html#tls-v1-removed)

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [July 11, 2019, 6:29am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910/2 "2019-07-11T06:29:22Z")

</div>

> [@swapnali](#):
>
> so in my elasticsearch.yml i have added below codeto remove this warning

This is not code to remove the warning, this is a configuration option to _explicitly_ re-enable TLSv1.0 for your installation. As you can read in the link you referenced:

> You can enable TLS v1.0 by configuring the relevant `ssl.supported_protocols` setting to include `"TLSv1"`

The warning is just there to notify you that if you wanted to use TLSv1.0 in version 7.0, you need to explicitly enable it in the configuration ( as opposed to 6.7 where it was implicitly enabled by default ). If you _don't have to_ use TLS v1.0, you can feel free to disregard that warning.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [July 11, 2019, 6:40am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910/3 "2019-07-11T06:40:27Z")

</div>

> [@swapnali](#):
>
> i have added below codeto remove this warning
> 
> ```
> xpack.security.http.ssl.supported_protocols
> 
> ```

I expect that you have other ssl contexts in your `elasticsearch.yml` that are relying on the default TLS protocols (e.g. `xpack.security.transport.ssl`).

You will need to look at which ones you have, and decide whether you want to explicitly enable TLSv1 (which an old protocol with known weaknesses) or disable it (which will happen automatically when you upgrade to 7.x).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 8, 2019, 6:40am UTC](https://discuss.elastic.co/t/tls-v1-0-has-been-removed-from-default-tls-ssl-protocols/189910/4 "2019-08-08T06:40:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.