Re: SSL and NPN

2014-05-01 Thread Hanno Böck
On Tue, 29 Apr 2014 07:05:29 +0200 Falco Schwarz hid...@falco.me wrote: AFAIK OpenSSL does not support NPN out of the box either and obe would have to apply patches to the openssl-src in order to get NPN support. In OpenSSL 1.0.2 ALPN support has been added, though. OpenSSL 1.0.1 supports NPN

Re: SSL and NPN

2014-04-29 Thread Paul Querna
Tend to agree with the other comments, NPN by itself will be deprecated quickly, ALPN is the future. I'd vote for a series of back ports that include both NPN and ALPN together. On Mon, Apr 28, 2014 at 2:50 PM, Jim Jagielski j...@jagunet.com wrote: Any reason to NOT include

SSL and NPN

2014-04-28 Thread Jim Jagielski
Any reason to NOT include http://svn.apache.org/viewvc?view=revisionrevision=1332643 http://svn.apache.org/viewvc?view=revisionrevision=1487772 in 2.4??

Re: SSL and NPN

2014-04-28 Thread Tim Bannister
On 28 Apr 2014, at 22:50, Jim Jagielski j...@jagunet.com wrote: Any reason to NOT include http://svn.apache.org/viewvc?view=revisionrevision=1332643 http://svn.apache.org/viewvc?view=revisionrevision=1487772 in 2.4?? I don't think

Re: SSL and NPN

2014-04-28 Thread Yehuda Katz
I have not looked at the patches or ALPN in detail, but I think the important question is how hard it would be to change this for (or add) ALPN support. If Chrome is planning to remove NPN support, it does not seem very useful to add the feature to HTTPD. - Y On Mon, Apr 28, 2014 at 5:56 PM,

Re: SSL and NPN

2014-04-28 Thread Falco Schwarz
AFAIK OpenSSL does not support NPN out of the box either and obe would have to apply patches to the openssl-src in order to get NPN support. In OpenSSL 1.0.2 ALPN support has been added, though. I know it is easy to say and probably takes a lot of effort to implement, but wouldn't it be better