# The sequence of TLS Version protocols are different
**URL:** https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962
**Category:** Search Guard
**Created:** [September 14, 2020, 11:39pm UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962 "2020-09-14T23:39:59Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@chintushah46](https://forum.search-guard.com/u/chintushah46)
#### Post date: [September 14, 2020, 11:39pm UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962/1 "2020-09-14T23:39:59Z")
Hi,
I am curious to know the reason for the different sequence of the TLS Version when we start the elasticsearch. Following is the output for two different versions,
**6.3.1:**
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] TLS Transport Client Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] TLS Transport Server Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] TLS HTTP Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] Enabled TLS protocols for transport layer : [TLSv1.1, TLSv1.2]
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] Enabled TLS protocols for HTTP layer : [TLSv1.1, TLSv1.2]
**7.7.1**
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] [CAD206] TLS Transport Client Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] [CAD206] TLS Transport Server Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] [CAD206] TLS HTTP Provider : JDK
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] [CAD206] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1]
[INFO][c.f.s.s.DefaultSearchGuardKeyStore] [CAD206] Enabled TLS protocols for HTTP layer : [TLSv1.3, TLSv1.2, TLSv1.1]
Does it select the version of TLS based on the sequence?
---
### Author:  [@srgbnd](https://forum.search-guard.com/u/srgbnd)
#### Post date: [September 15, 2020, 8:38am UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962/2 "2020-09-15T08:38:46Z")
Hi.
What TLS protocol versions did you specify in elasticsearch.yml? Look for the options `searchguard.ssl.http.enabled_protocols` and `searchguard.ssl.transport.enabled_protocols`.
---
### Author:  [@chintushah46](https://forum.search-guard.com/u/chintushah46)
#### Post date: [September 15, 2020, 11:16am UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962/3 "2020-09-15T11:16:45Z")
Thank you for the response.
I have not mentioned any of the protocol versions in elasticsearch.yml, and I know I can use that setting to ask elasticsearch/searchguard to use a specific version of TLS.
But over here my question is why the sequence of “Enabled TLS protocols” has changed and if it’s changed what is the preference of selecting a version from the list?
---
### Author:  [@cstaley](https://forum.search-guard.com/u/cstaley)
#### Post date: [September 15, 2020, 2:23pm UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962/4 "2020-09-15T14:23:27Z")
The order of the versions should be not significiant.
The respective RFCs [RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2](https://tools.ietf.org/html/rfc5246#appendix-E) describe that during protocol negotiation the highest version supported by server and client should be selected. Thus, the version determines the priority, not the order of the versions.
---
### Author:  [@system](https://forum.search-guard.com/u/system)
#### Post date: [October 6, 2020, 2:23pm UTC](https://forum.search-guard.com/t/the-sequence-of-tls-version-protocols-are-different/1962/5 "2020-10-06T14:23:36Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.