# vars.xml
  <X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1.2"/>
  <X-PRE-PROCESS cmd="set" data="sip_tls_ciphers=ALL:!ADH:!LOW:!EXP:!RC4:!3DES:!MD5:@STRENGTH"/>

# internal.xml

    <param name="wss-binding" value=":443"/>
    <param name="tls-version" value="$${sip_tls_version}"/>
    <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>

However when I check out my server with https://www.ssllabs.com/ssltest/analyze.html it shows TLS1.1 along with TLS1.2. 

Any way to JUST have the server answer TLS1.2? Also is it possible to set the order of cipher suites and get rid of:

Cipher Suites
# TLS 1.2 (server has no preference)
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)   WEAK128
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x41)   WEAK128
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)   WEAK128
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)   WEAK128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)   WEAK256
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x84)   WEAK256
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d)   WEAK256
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)   WEAK256


><>
nathan stratton