You need to provide more information such as Firefox error messages, nginx config, server hostname, etc. You may find https://developer.mozilla.org/en-US/docs/Tools/Network_Monitor useful.
I did notice your cipher suites include blacklisted ciphers, but this shouldn't be an issue for outright failure. https://http2.github.io/http2-spec/#BadCipherSuites On Wed, Jun 22, 2016 at 7:50 AM, Rajnesh Kumar Siwal < [email protected]> wrote: > Hi, > We have recently deployed a site on http2 (with ALPN support) using nginx. > The site does not open in Firefox 47. > The site supports following ciphers : > > *Protocols* TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes SSL 3 No SSL 2 No > > > *Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and > SSL 2 suites at the end)* TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) > ECDH secp256r1 (eq. 3072 bits RSA) FS 256 > TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp256r1 (eq. 3072 > bits RSA) FS 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH > secp256r1 (eq. 3072 bits RSA) FS 256 TLS_RSA_WITH_AES_256_GCM_SHA384 ( > 0x9d) 256 TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) 256 > TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA > (0x84) 256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH > secp256r1 (eq. 3072 bits RSA) FS 128 > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp256r1 (eq. 3072 > bits RSA) FS 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH > secp256r1 (eq. 3072 bits RSA) FS 128 TLS_RSA_WITH_AES_128_GCM_SHA256 ( > 0x9c) 128 TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) 128 > TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA > (0x41) 128 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012) ECDH secp256r1 > (eq. 3072 bits RSA) FS 112 TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112 > > -- > Regards, > Rajnesh Kumar Siwal > > > _______________________________________________ > nginx mailing list > [email protected] > http://mailman.nginx.org/mailman/listinfo/nginx >
_______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
