title: How to Disable TLS 1.0 and 1.1 to enable only TLS 1.2 and TLS 1.3 in Apache for a Wordpress Bitnami Amazon-Ligthsail instance?
body: <p>This is my first experience with Amazon Lighsail, Wordpress Multisite, Bitnami 
  and even with Let's Encrypt; now it seems everything just works, except for SSL directives in my virtualhost file.</p>
  
  <p>Because it seems that major browsers – aka Chrome, Safari/Webkit, Mozilla Firefox and IE/Edge - are going to remove support to TLS 1.0 and TLS 1.1, as soon as the beginning of the new year – precisely among January and March – I would want to know how to disable them for my new Wordpress Multisite instance in Lightsail. </p>
  
  <p>After I obtained a Let’s Encript SSL certificate and successfully deployed it I tested it to verify that TLS 1.0 and TLS 1.1 are enabled along with TLS 1.2. 
  Now it seems that my Apache version 2.4.39 supports also TLS 1.3 and I am trying to enable even it and disable the two older versions. 
  Reading on the net I found that I must change the httpd.conf file to insert this directive</p>
  
  <pre><code>SSLProtocol -all +TLSv1.2
  </code></pre>
  
  <p>so, inside the httpd.conf file I found this block, that seems the right place: </p>
  
  <pre><code># Default SSL Virtual Host configuration.
  
  &lt;IfModule !ssl_module&gt;
  LoadModule ssl_module modules/mod_ssl.so
  &lt;/IfModule&gt;
  
  Listen 443
  SSLProtocol all -SSLv2 -SSLv3
  SSLHonorCipherOrder on
  SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA$
  SSLPassPhraseDialog  builtin
  SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
  SSLSessionCacheTimeout  300
  
  &lt;VirtualHost _default_:443&gt;
  DocumentRoot "/opt/bitnami/apache2/htdocs"
  SSLEngine on
  SSLCertificateFile "/opt/bitnami/apache2/conf/mydomain.crt"
  SSLCertificateKeyFile "/opt/bitnami/apache2/conf/mydomain.key"
  
  &lt;Directory "/opt/bitnami/apache2/htdocs"&gt;
  Options Indexes FollowSymLinks
  AllowOverride All
  &lt;IfVersion &lt; 2.3 &gt;
  Order allow,deny
  Allow from all
  &lt;/IfVersion&gt;
  &lt;IfVersion &gt;= 2.3 &gt;
  Require all granted
  &lt;/IfVersion&gt;
  &lt;/Directory&gt;
  
  # Error Documents
  ErrorDocument 503 /503.html
  
  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
  &lt;/VirtualHost&gt;
  </code></pre>
  
  <p>I tryed to simply update the httpd.conf and the httpd-ssl.conf, but nothing appens: TLS 1.3 does not work and TLS 1.0 and TLS 1.1 are always anabled.</p>
  
  <p>Now, and I read even this question</p>
  
  <p><a href="https://stackoverflow.com/questions/43437546/disabling-tls-1-0-in-apache-2-4][1]">Disabling TLS 1.0 in Apache 2.4</a></p>
  
  <p>after my adds, this is my ssl directives in httpd-ssl.conf file:</p>
  
  <pre><code># SSLProtocol all -SSLv3
  SSLProtocol  +TLSv1.2 +TLSv1.3
  #SSLProtocol all -TLSv1 -SSLv3
  SSLProxyProtocol all +TLSv1.2 +TLSv1.3
  </code></pre>
  
  <p>But nothing changed and now I really do not know how to enable TLS 1.3 and disable TLS 1.0 and TLS 1.1.
  Of course after every change I used to restart Apache.</p>