diff --git a/rpcserver.go b/rpcserver.go
index 23d118a6e..27c6c17b7 100644
--- a/rpcserver.go
+++ b/rpcserver.go
@@ -539,6 +539,7 @@ func newRPCServer(listenAddrs []string, s *server) (*rpcServer, error) {
 
 	tlsConfig := tls.Config{
 		Certificates: []tls.Certificate{keypair},
+		MinVersion:   tls.VersionTLS12,
 	}
 
 	// TODO(oga) this code is similar to that in server, should be