bneradt opened a new pull request, #13428: URL: https://github.com/apache/trafficserver/pull/13428
HTTP/2 can currently be negotiated with TLS 1.2 cipher suites that RFC 9113 prohibits. Clients that enforce the restriction can reject those connections instead of falling back to HTTP/1.1. This checks the pending cipher during ALPN selection and removes HTTP/2 when its IANA identifier is prohibited. This also adds AuTest coverage for permitted negotiation and HTTP/1.1 fallback. Fixes: #5287 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
