diff options
| author | Vladimir Homutov <vl@nginx.com> | 2021-10-15 10:02:15 +0300 |
|---|---|---|
| committer | Vladimir Homutov <vl@nginx.com> | 2021-10-15 10:02:15 +0300 |
| commit | 1db517fb71aed6d6fffc8347086f89eb29b83dea (patch) | |
| tree | ac2416b0a3d2f2416e570cd3e1fe003f76185814 /src/http/ngx_http.c | |
| parent | dde319ee0c9de26a6f104feb062cfffaa32c16c0 (diff) | |
| download | nginx-1db517fb71aed6d6fffc8347086f89eb29b83dea.tar.gz nginx-1db517fb71aed6d6fffc8347086f89eb29b83dea.zip | |
HTTP/2: removed support for NPN.
NPN was replaced with ALPN, published as RFC 7301 in July 2014.
It used to negotiate SPDY (and, in transition, HTTP/2).
NPN supported appeared in OpenSSL 1.0.1. It does not work with TLSv1.3 [1].
ALPN is supported since OpenSSL 1.0.2.
The NPN support was dropped in Firefox 53 [2] and Chrome 51 [3].
[1] https://github.com/openssl/openssl/issues/3665.
[2] https://bugzilla.mozilla.org/show_bug.cgi?id=1248198
[3] https://www.chromestatus.com/feature/5767920709795840
Diffstat (limited to 'src/http/ngx_http.c')
| -rw-r--r-- | src/http/ngx_http.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/http/ngx_http.c b/src/http/ngx_http.c index 3d5c4ac16..73c08d593 100644 --- a/src/http/ngx_http.c +++ b/src/http/ngx_http.c @@ -1338,13 +1338,12 @@ ngx_http_add_address(ngx_conf_t *cf, ngx_http_core_srv_conf_t *cscf, } #if (NGX_HTTP_V2 && NGX_HTTP_SSL \ - && !defined TLSEXT_TYPE_application_layer_protocol_negotiation \ - && !defined TLSEXT_TYPE_next_proto_neg) + && !defined TLSEXT_TYPE_application_layer_protocol_negotiation) if (lsopt->http2 && lsopt->ssl) { ngx_conf_log_error(NGX_LOG_WARN, cf, 0, "nginx was built with OpenSSL that lacks ALPN " - "and NPN support, HTTP/2 is not enabled for %V", + "support, HTTP/2 is not enabled for %V", &lsopt->addr_text); } |