diff --git a/src/common/config.py b/src/common/config.py
index e694754f39120b21bd4235edcc7c5f7b7faf3a29..f5ee4dd260382fc1d9ba2edff63d0e05f6222c26 100644
--- a/src/common/config.py
+++ b/src/common/config.py
@@ -349,6 +349,7 @@ class Config:
                     'enable_esessions': [opt_bool, True, _('Enable ESessions encryption for this account.')],
                     'autonegotiate_esessions': [opt_bool, True, _('Should Gajim automatically start an encrypted session when possible?')],
                     'connection_types': [ opt_str, 'tls ssl plain', _('Ordered list (space separated) of connection type to try. Can contain tls, ssl or plain')],
+                    'tls_version': [ opt_str, '1.0', '' ],
                     'cipher_list': [ opt_str, 'HIGH:!aNULL:RC4-SHA', '' ],
                     'action_when_plaintext_connection': [ opt_str, 'warn', _('Show a warning dialog before sending password on an plaintext connection. Can be \'warn\', \'connect\', \'disconnect\'') ],
                     'warn_when_insecure_ssl_connection': [ opt_bool, True, _('Show a warning dialog before using standard SSL library.') ],
diff --git a/src/common/connection.py b/src/common/connection.py
index 24d95f629862b7e46de66fc92a7dfb4937443593..170b2984528370359aa3238588a73b9ef636cfb8 100644
--- a/src/common/connection.py
+++ b/src/common/connection.py
@@ -1252,9 +1252,11 @@ class Connection(CommonConnection, ConnectionHandlers):
             if not os.path.exists(cacerts):
                 cacerts = ''
             mycerts = common.gajim.MY_CACERTS
+            tls_version = gajim.config.get_per('accounts', self.name,
+                'tls_version')
             cipher_list = gajim.config.get_per('accounts', self.name,
                 'cipher_list')
-            secure_tuple = (self._current_type, cacerts, mycerts, cipher_list)
+            secure_tuple = (self._current_type, cacerts, mycerts, tls_version, cipher_list)
 
             con = nbxmpp.NonBlockingClient(
                 domain=self._hostname,