On 22.04.2015 18:54, Jim Jagielski wrote: >> For me the time seems right to rip NPN out of trunk and only backport >> the ALPN code to 2.4. >> > > I'd be +1 for that.
So, to get one step further, and since there were no explicit objections to removing NPN support so far (or arguments for keeping it, FWIW), I went ahead and took a stab at this with r1676004. Only tested in terms of "compiles both w/ and w/o HAVE_TLS_ALPN", so it certainly needs more eyes before a backport proposal could be made. There's also a "TODO: we should have a mod_ssl configuration parameter" in ssl_engine_kernel.c which I'm unsure to what it refers. Kaspar