Thanks. I think that is a common confusion; the ciphers classified as TLS1.x is different than the protocol TLS. I need to make sure we only negotiate to version TLS 1.0 in the hello message. -David SSL Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 91 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 87 Version: TLS 1.2 (0x0303) From: Alan Buxey [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: Thursday, November 17, 2016 4:43 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>; David Ward <daward@Brocade.COM>; freeradius-users@lists.freeradius.org Subject: Re: No TLS 1.2 Modify the CIPHER list in the eap config file? alan