Mercurial > hg > nginx
comparison src/http/ngx_http.c @ 7934:61abb35bb8cf
HTTP/2: removed support for NPN.
NPN was replaced with ALPN, published as RFC 7301 in July 2014.
It used to negotiate SPDY (and, in transition, HTTP/2).
NPN supported appeared in OpenSSL 1.0.1. It does not work with TLSv1.3 [1].
ALPN is supported since OpenSSL 1.0.2.
The NPN support was dropped in Firefox 53 [2] and Chrome 51 [3].
[1] https://github.com/openssl/openssl/issues/3665.
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1248198
[3] https://www.chromestatus.com/feature/5767920709795840
| author | Vladimir Homutov <vl@nginx.com> |
|---|---|
| date | Fri, 15 Oct 2021 10:02:15 +0300 |
| parents | 1bde031b59ff |
| children | 4eb1383f6432 61d0fa67b55e |
comparison
equal
deleted
inserted
replaced
| 7933:2f443cac3f1e | 7934:61abb35bb8cf |
|---|---|
| 1336 return NGX_ERROR; | 1336 return NGX_ERROR; |
| 1337 } | 1337 } |
| 1338 } | 1338 } |
| 1339 | 1339 |
| 1340 #if (NGX_HTTP_V2 && NGX_HTTP_SSL \ | 1340 #if (NGX_HTTP_V2 && NGX_HTTP_SSL \ |
| 1341 && !defined TLSEXT_TYPE_application_layer_protocol_negotiation \ | 1341 && !defined TLSEXT_TYPE_application_layer_protocol_negotiation) |
| 1342 && !defined TLSEXT_TYPE_next_proto_neg) | |
| 1343 | 1342 |
| 1344 if (lsopt->http2 && lsopt->ssl) { | 1343 if (lsopt->http2 && lsopt->ssl) { |
| 1345 ngx_conf_log_error(NGX_LOG_WARN, cf, 0, | 1344 ngx_conf_log_error(NGX_LOG_WARN, cf, 0, |
| 1346 "nginx was built with OpenSSL that lacks ALPN " | 1345 "nginx was built with OpenSSL that lacks ALPN " |
| 1347 "and NPN support, HTTP/2 is not enabled for %V", | 1346 "support, HTTP/2 is not enabled for %V", |
| 1348 &lsopt->addr_text); | 1347 &lsopt->addr_text); |
| 1349 } | 1348 } |
| 1350 | 1349 |
| 1351 #endif | 1350 #endif |
| 1352 | 1351 |