> Why does this not work? <If> is evaluated early in request processing, long after the handshake. However, the manual says: In per-directory context it forces a SSL renegotiation with the reconfigured Cipher Suite after the HTTP request was read but before the HTTP response is sent. I suggest testing w/o TLS13 and testing the equivalent config with <Directory> or <Location> to see if renegotiation occurs w/o <If>. You will have to carefully look for the final cipher. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx