Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

JeffP's avatar
Level 3

SSL Certs no longer support Win7 IE 10 with Forge lets encrypt option

Hello I just added a new server and switched my project over to it. I am getting reports from folks in Win7 that they can't access the site. It looks like new servers are only getting TLS1.2 and not 1.1 or 1.0 . I want to ad them back in to provide support to these folks however can I just add the SSL versions or do I need to change the ciphers also? Thank you in advance

currently: ssl_protocols TLSv1.2;

Can I change to: ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

0 likes
2 replies
Cronix's avatar
Cronix
Best Answer
Level 67

Yes, but v1.0 has vulnerabilities, which is why it's suggested to not use them. In fact, they're disallowed/blocked by some services, especially payment gateways, as they are not PCI compliant (as of June/2018). I know Braintree blocks the requests using v1/1.1. Some browsers will also block sites using TLSv1. Other services are blocking it too, and growing all of the time.

So, if you do, just realize you may be putting your site at risk.

https://www.braintreepayments.com/blog/updating-your-production-environment-to-support-tlsv1-2/

https://www.acunetix.com/blog/articles/tls-vulnerabilities-attacks-final-part/

https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls

You can google "TLSv1.0 vulnerability" for more info. I wouldn't use it.

JeffP's avatar
Level 3

Thank you for helping this was a great answer :)

Please or to participate in this conversation.