Re: No luck with `Protocols h2`

2015-10-10 Thread Jacob Champion
On 10/10/2015 12:20 AM, Stefan Eissing wrote: In the meantime, I have prepped a howto h2 to point people to in order to give/collect some advice. http://icing.github.io/mod_h2/howto.html That will, once stable become part of the official docs. Great, thanks! That is very helpful. One bit of

Re: No luck with `Protocols h2`

2015-10-10 Thread Stefan Eissing
Glad that Gregg pointed you the right way. Yes, I'll add that to the todos. There should be a better spec compliance check configurable in the server that gives at least logs for clients that do not comply and are turned down. In the meantime, I have prepped a howto h2 to point people to in

No luck with `Protocols h2`

2015-10-09 Thread Jacob Champion
Stefan, I'm trying to test mod_http2 for the 2.4.17 release, but I cannot for the life of me get ALPN and the h2 protocol working together. h2c seems to work, as does http/1.1 over TLS. My hope is that I'm just missing a config directive somewhere; can anyone else confirm that h2 negotiation

Re: No luck with `Protocols h2`

2015-10-09 Thread Gregg Smith
Hi Jacob, On 10/9/2015 4:47 PM, Jacob Champion wrote: Stefan, I'm trying to test mod_http2 for the 2.4.17 release, but I cannot for the life of me get ALPN and the h2 protocol working together. h2c seems to work, as does http/1.1 over TLS. My hope is that I'm just missing a config directive

Re: No luck with `Protocols h2`

2015-10-09 Thread Jacob Champion
On 10/09/2015 05:11 PM, Gregg Smith wrote: I have no real recommendation for you but the RFC states all implementations must support TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 or OpenSSL's equivalent ECDHE-RSA-AES128-GCM-SHA256. So it's a starting point. Perfect! After pulling it up front with