How to configure the memsql to only accept TLS1.2?

Currently for security reasons I need to set memsql to only use TLS1.2 but I can’t find where I can set it this way. I have only been able to verify in the global variables the versions of TLS that it supports but my question is where can I restrict it to only use tls1.2?

You can set the tls_version global variable to just TLSv1.2. You cannot set this variable to take effect while the node is running; it can be set only at startup using

sdb-admin update-config

or

memsql-ops memsql-update-config

Hi Avernon, I have lowered the nodes and it tells me that I cannot set the variable when the nodes are down. Could you tell me what the stratup refers to or what command I could do it with.

Are you using sdb-admin or memsql-ops?

@larryneal614
Are you using sdb-admin or memsql-ops ?