Mercurial > hg > nginx
comparison src/http/ngx_http.c @ 7934:61abb35bb8cf
HTTP/2: removed support for NPN.
NPN was replaced with ALPN, published as RFC 7301 in July 2014.
It used to negotiate SPDY (and, in transition, HTTP/2).
NPN supported appeared in OpenSSL 1.0.1. It does not work with TLSv1.3 [1].
ALPN is supported since OpenSSL 1.0.2.
The NPN support was dropped in Firefox 53 [2] and Chrome 51 [3].
[1] https://github.com/openssl/openssl/issues/3665.
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1248198
[3] https://www.chromestatus.com/feature/5767920709795840
author | Vladimir Homutov <vl@nginx.com> |
---|---|
date | Fri, 15 Oct 2021 10:02:15 +0300 |
parents | 1bde031b59ff |
children | 4eb1383f6432 61d0fa67b55e |
comparison
equal
deleted
inserted
replaced
7933:2f443cac3f1e | 7934:61abb35bb8cf |
---|---|
1336 return NGX_ERROR; | 1336 return NGX_ERROR; |
1337 } | 1337 } |
1338 } | 1338 } |
1339 | 1339 |
1340 #if (NGX_HTTP_V2 && NGX_HTTP_SSL \ | 1340 #if (NGX_HTTP_V2 && NGX_HTTP_SSL \ |
1341 && !defined TLSEXT_TYPE_application_layer_protocol_negotiation \ | 1341 && !defined TLSEXT_TYPE_application_layer_protocol_negotiation) |
1342 && !defined TLSEXT_TYPE_next_proto_neg) | |
1343 | 1342 |
1344 if (lsopt->http2 && lsopt->ssl) { | 1343 if (lsopt->http2 && lsopt->ssl) { |
1345 ngx_conf_log_error(NGX_LOG_WARN, cf, 0, | 1344 ngx_conf_log_error(NGX_LOG_WARN, cf, 0, |
1346 "nginx was built with OpenSSL that lacks ALPN " | 1345 "nginx was built with OpenSSL that lacks ALPN " |
1347 "and NPN support, HTTP/2 is not enabled for %V", | 1346 "support, HTTP/2 is not enabled for %V", |
1348 &lsopt->addr_text); | 1347 &lsopt->addr_text); |
1349 } | 1348 } |
1350 | 1349 |
1351 #endif | 1350 #endif |
1352 | 1351 |