# Enable older version of TLS on LDAP Generic VA Connector **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** virtual-appliance, identity-security-cloud, ootb-connector, sources\ **Created:** [October 16, 2025, 9:51am UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463 "2025-10-16T09:51:38Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![ninosp](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@ninosp](https://developer.sailpoint.com/discuss/u/ninosp)\ **Post date:** [October 16, 2025, 9:51am UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463/1 "2025-10-16T09:51:38Z")
Hi! I have configured the [LDAP Generic Connector](https://Integrating%20SailPoint%20with%20Lightweight%20Directory%20Access%20Protocol) in ISC towards an OpenLDAP (2.4.31) source. Unfortunately my clients OpenLDAP only supports TLSv1.2 along with some of the ciphers in the [ciphers suite](https://docs.openssl.org/3.0/man1/openssl-ciphers/#name) used with that version. Currently the test connection fails during handshaking process. Testing connection by setting the TLS-version and cipher explicitly with toolbox openssl on the VA solves the problem. **Questions:** - Is it possible to specify on the VA which TLS version to use for a specific source? - Is it possible to specify on the VA which cipher suite to use for a specific source? I would want to use this configuration: TLS version: TLSv1.2 Cipher: AES256-SHA256 (cipher is TLS\_RSA\_WITH\_AES\_256\_CBC\_SHA256) Thanks ---
**Author:** ![mpotti](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mpotti/32/2916_2.png) [@mpotti](https://developer.sailpoint.com/discuss/u/mpotti)\ **Post date:** [October 16, 2025, 11:54am UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463/2 "2025-10-16T11:54:02Z")
Have you enabled TLS on the source connection configuration page? For this level it might be best to open a ticket with SailPoint support there might be a security reason as to why TLS 1.2 is not enabled. ---
**Author:** ![ninosp](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@ninosp](https://developer.sailpoint.com/discuss/u/ninosp)\ **Post date:** [October 16, 2025, 1:29pm UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463/3 "2025-10-16T13:29:11Z")
1. I have enabled TLS on the source configuration 2. I’m using a self-signed certificate from the LDAP-server that I have imported in /home/sailpoint/certificates/ and then restarted ccg. 3. Running “openssl s\_client -connect serverfqdn:636 -tls1\_2 -cipher AES256-SHA256” works from the VA so everything seems to be open between VA and LDAP-server. I will contact support and see ---
**Author:** ![ninosp](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@ninosp](https://developer.sailpoint.com/discuss/u/ninosp)\ **Post date:** [October 17, 2025, 6:41am UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463/4 "2025-10-17T06:41:50Z")
Update: I was mistakenly believing that TLSv1.2 and AES256-SHA256 was not used from the VA but it does, it is probably negotiated between client and server. I re-imported the certificate under /home/sailpoint/certificates and restarted ccg again and now it works. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [December 16, 2025, 6:42am UTC](https://developer.sailpoint.com/discuss/t/enable-older-version-of-tls-on-ldap-generic-va-connector/185463/5 "2025-12-16T06:42:35Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.