Applies to: VisualSVN Server 3.6 and later
VisualSVN Server allows administrators to choose from three TLS/SSL compatibility levels that enable certain versions of TLS or SSL protocols and certain cipher suites. These levels are based on the recommendations provided by Mozilla's Operations Security group and help administrators to select the compatibility and security level that best suits their environment and requirements.
VisualSVN Server 4.1 and later support the following compatibility levels:
This level provides a higher level of security, but is only compatible with latest Subversion clients and browsers. Modern TLS/SSL compatibility level enables TLS 1.2 and TLS 1.3 protocols only. TLS 1.1 and older and SSL 3.0 are disabled. Legacy web browsers such as Internet Explorer 7 or older and Subversion clients that do not support TLS 1.2 protocol and are unable to connect to the server configured to use Modern TLS/SSL compatibility level.
This level is compatible with a wide range of clients that support TLS 1.0 and higher. This level is reasonably secure and is compatible with the widest range of client software. It enables TLS 1.0 and higher, but keeps SSL 3.0 disabled.
Use this level only if you need to support outdated Subversion clients and browsers. The setting enables the deprecated SSL 3.0 protocol in addition to TLS 1.0, TLS 1.1 and TLS 1.2.
Configuring TLS/SSL compatibility level via VisualSVN Server Manager console
Follow these steps to change the TLS/SSL compatibility level through the management console:
- Start VisualSVN Server Manager console.
- Click Action | Properties.
- Click Network tab.
- In TLS/SSL compatibility level, click Change.
- Select the required compatibility level.
- Click OK.
- Click Apply.
Configuring TLS/SSL compatibility level via VisualSVN Server PowerShell
TLS/SSL compatibility level could be changed by running Set-SvnServerConfiguration VisualSVN Server PowerShell cmdlet. For example, run the following PowerShell command to configure VisualSVN Server with Modern TLS/SSL compatibility level:
PS C:\> Set-SvnServerConfiguration -SSLCompatibilityLevel Modern
Learn more about Set-SvnServerConfiguration cmdlet in the dedicated section of the article KB88: VisualSVN Server PowerShell Cmdlet Reference
History of changes
The list below summarizes the major changes to the TLS/SSL compatibility levels between different versions of VisualSVN Server:
- Version 4.1.0. Enable support for TLS 1.3 protocol in all compatibility levels.
- Version 3.6.0. Initial addition of the TLS/SSL compatibility levels.