Now that 7.4 CR has delivered OpenSSL 1.0.2, I should be able to serve http/2 pages to Chrome, but I still see messages that ALPN is not enabled. OpenSSL 1.0.2 is installed: $ rpm -qa |grep openssl openssl-libs-1.0.2k-8.el7.x86_64 openssl-1.0.2k-8.el7.x86_64 But https://tools.keycdn.com/http2-test says "www.stevenstern.me" supports http 2 but ALPN is not supported. Ideas? Does anything need to be explicitly enabled for ALPN? As I mentioned, the http2 stuff seems to be working. -- -- Steve
> Am 27.08.2017 um 01:04 schrieb SternData <subscribed-lists at sterndata.com>: > > Now that 7.4 CR has delivered OpenSSL 1.0.2, I should be able to serve > http/2 pages to Chrome, but I still see messages that ALPN is not enabled. > > OpenSSL 1.0.2 is installed: > > $ rpm -qa |grep openssl > openssl-libs-1.0.2k-8.el7.x86_64 > openssl-1.0.2k-8.el7.x86_64 > > > But https://tools.keycdn.com/http2-test says "www.stevenstern.me" > supports http 2 but ALPN is not supported. > > Ideas? Does anything need to be explicitly enabled for ALPN? As I > mentioned, the http2 stuff seems to be working.Are you sure that the apache module is compiled with ALPN and against openssl-1.0.2?> https://www.stevenstern.me > server: Apache/2.4.27 (CentOS) OpenSSL/1.0.1e-fips PHP/7.0.22-- LF
What do you need to serve? Would you think about using Caddy(https://caddyserver.com/) ? It can use the fastcgi interface for php and other related levels of code. Eliezer ---- Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: eliezer at ngtech.co.il -----Original Message----- From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of SternData Sent: Sunday, August 27, 2017 02:05 To: CentOS mailing list <centos at centos.org> Subject: [CentOS] ALPN and Http/2, CentOS 7.4 Now that 7.4 CR has delivered OpenSSL 1.0.2, I should be able to serve http/2 pages to Chrome, but I still see messages that ALPN is not enabled. OpenSSL 1.0.2 is installed: $ rpm -qa |grep openssl openssl-libs-1.0.2k-8.el7.x86_64 openssl-1.0.2k-8.el7.x86_64 But https://tools.keycdn.com/http2-test says "www.stevenstern.me" supports http 2 but ALPN is not supported. Ideas? Does anything need to be explicitly enabled for ALPN? As I mentioned, the http2 stuff seems to be working. -- -- Steve _______________________________________________ CentOS mailing list CentOS at centos.org https://lists.centos.org/mailman/listinfo/centos