diff --git a/roles/ocserv/templates/ocserv.conf.j2 b/roles/ocserv/templates/ocserv.conf.j2
index 3ddeadf..2dff89a 100644
--- a/roles/ocserv/templates/ocserv.conf.j2
+++ b/roles/ocserv/templates/ocserv.conf.j2
@@ -15,6 +15,7 @@ cisco-client-compat = true
 dtls-legacy = true
 compression = true
 isolate-workers = true
+tls-priorities = NORMAL:-VERS-TLS1.0:-VERS-TLS1.1
 
 auth = certificate
 ca-cert = /etc/ocserv/ca.crt