Ok, both clients do not provide the server name via the TLS SNI extension. That is strange. How did you get the server/h2load installed on your Ubuntu? Default Ubuntu comes without mod_http2 AFAIK...(and which Ubuntu is it?) Thanks!
> Am 25.08.2016 um 16:49 schrieb Max Meyer <redeemerofsouls...@web.de>: > > I created a new certificate, now the cert name matches but h2load still falls > back to HTTP/1.1 > > Here is the error.log after apache restart > > ----------- > > [Thu Aug 25 16:38:12.351311 2016] [ssl:info] [pid 3931] AH01887: Init: > Initializing (virtual) servers for SSL > [Thu Aug 25 16:38:12.351381 2016] [ssl:info] [pid 3931] AH01914: Configuring > server localhost:443 for SSL protocol > [Thu Aug 25 16:38:12.351604 2016] [ssl:debug] [pid 3931] > ssl_engine_init.c(413): AH01893: Configuring TLS extension handling > [Thu Aug 25 16:38:12.351843 2016] [ssl:debug] [pid 3931] ssl_util_ssl.c(443): > AH02412: [localhost:443] Cert matches for name 'localhost' [subject: > CN=localhost,O=Internet Widgits Pty Ltd,ST=Some-State,C=AU / issuer: > CN=localhost,O=Internet Widgits Pty Ltd,ST=Some-State,C=AU / serial: > A8AC62CFC0533ACA / notbefore: Aug 25 14:07:20 2016 GMT / notafter: Aug 23 > 14:07:20 2026 GMT] > [Thu Aug 25 16:38:12.351854 2016] [ssl:info] [pid 3931] AH02568: Certificate > and private key localhost:443:0 configured from /etc/ssl/server.crt and > /etc/ssl/private.key > [Thu Aug 25 16:38:12.351948 2016] [ssl:info] [pid 3931] AH01876: > mod_ssl/2.4.23 compiled against Server: Apache/2.4.23, Library: OpenSSL/1.0.2h > [Thu Aug 25 16:38:12.351975 2016] [http2:debug] [pid 3931] mod_http2.c(101): > AH03089: initializing post config dry run > [Thu Aug 25 16:38:12.372115 2016] [ssl:info] [pid 3932] AH01887: Init: > Initializing (virtual) servers for SSL > [Thu Aug 25 16:38:12.372143 2016] [ssl:info] [pid 3932] AH01914: Configuring > server localhost:443 for SSL protocol > [Thu Aug 25 16:38:12.372363 2016] [ssl:debug] [pid 3932] > ssl_engine_init.c(413): AH01893: Configuring TLS extension handling > [Thu Aug 25 16:38:12.372598 2016] [ssl:debug] [pid 3932] ssl_util_ssl.c(443): > AH02412: [localhost:443] Cert matches for name 'localhost' [subject: > CN=localhost,O=Internet Widgits Pty Ltd,ST=Some-State,C=AU / issuer: > CN=localhost,O=Internet Widgits Pty Ltd,ST=Some-State,C=AU / serial: > A8AC62CFC0533ACA / notbefore: Aug 25 14:07:20 2016 GMT / notafter: Aug 23 > 14:07:20 2026 GMT] > [Thu Aug 25 16:38:12.372609 2016] [ssl:info] [pid 3932] AH02568: Certificate > and private key localhost:443:0 configured from /etc/ssl/server.crt and > /etc/ssl/private.key > [Thu Aug 25 16:38:12.372703 2016] [ssl:info] [pid 3932] AH01876: > mod_ssl/2.4.23 compiled against Server: Apache/2.4.23, Library: OpenSSL/1.0.2h > [Thu Aug 25 16:38:12.372738 2016] [http2:info] [pid 3932] AH03090: mod_http2 > (v1.5.11, feats=CHPRIO+SHA256, nghttp2 1.12.0-DEV), initializing... > [Thu Aug 25 16:38:12.395339 2016] [mpm_prefork:notice] [pid 3932] AH00163: > Apache/2.4.23 (Ubuntu) OpenSSL/1.0.2h PHP/5.5.9-1ubuntu4.19 configured -- > resuming normal operations > [Thu Aug 25 16:38:12.395406 2016] [core:notice] [pid 3932] AH00094: Command > line: '/usr/sbin/apache2' > [Thu Aug 25 16:38:12.395414 2016] [core:debug] [pid 3932] log.c(1546): > AH02639: Using SO_REUSEPORT: yes (1) > ---------- > > Then I tried to use h2load > --------- > > [Thu Aug 25 16:38:26.346029 2016] [ssl:info] [pid 3935] [client > 10.0.0.4:52613] AH01964: Connection to child 0 established (server > localhost:443) > [Thu Aug 25 16:38:26.346479 2016] [ssl:debug] [pid 3935] > ssl_engine_kernel.c(2143): [client 10.0.0.4:52613] AH02645: Server name not > provided via TLS extension (using default/first virtual host) > [Thu Aug 25 16:38:26.406552 2016] [ssl:debug] [pid 3935] > ssl_engine_kernel.c(2042): [client 10.0.0.4:52613] AH02041: Protocol: > TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) > [Thu Aug 25 16:38:26.407026 2016] [ssl:debug] [pid 3935] > ssl_engine_kernel.c(366): [client 10.0.0.4:52613] AH02034: Initial (No.1) > HTTPS request received for child 0 (server localhost:443) > [Thu Aug 25 16:38:26.407293 2016] [ssl:debug] [pid 3935] > ssl_engine_kernel.c(366): [client 10.0.0.4:52613] AH02034: Subsequent (No.2) > HTTPS request received for child 0 (server localhost:443) > [Thu Aug 25 16:38:26.407916 2016] [ssl:debug] [pid 3935] > ssl_engine_io.c(1033): [client 10.0.0.4:52613] AH02001: Connection closed to > child 0 with standard shutdown (server localhost:443) > -------- > and finally I used firefox > ------- > [Thu Aug 25 16:38:29.196386 2016] [ssl:info] [pid 3936] [client > 10.0.0.4:52614] AH01964: Connection to child 1 established (server > localhost:443) > [Thu Aug 25 16:38:29.197365 2016] [ssl:debug] [pid 3936] > ssl_engine_kernel.c(2143): [client 10.0.0.4:52614] AH02645: Server name not > provided via TLS extension (using default/first virtual host) > [Thu Aug 25 16:38:29.197542 2016] [ssl:debug] [pid 3936] > ssl_engine_kernel.c(2143): [client 10.0.0.4:52614] AH02645: Server name not > provided via TLS extension (using default/first virtual host) > [Thu Aug 25 16:38:29.197563 2016] [core:debug] [pid 3936] protocol.c(1893): > [client 10.0.0.4:52614] AH03155: select protocol from h2, > choices=h2,spdy/3.1,http/1.1 for server localhost > [Thu Aug 25 16:38:29.197599 2016] [core:debug] [pid 3936] protocol.c(1938): > [client 10.0.0.4:52614] AH03156: select protocol, proposals=h2,http/1.1 > preferences=h2 configured=h2 > [Thu Aug 25 16:38:29.197614 2016] [core:debug] [pid 3936] protocol.c(1956): > [client 10.0.0.4:52614] AH03157: selected protocol=h2 > [Thu Aug 25 16:38:29.208965 2016] [ssl:debug] [pid 3936] > ssl_engine_kernel.c(2042): [client 10.0.0.4:52614] AH02041: Protocol: > TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) > [Thu Aug 25 16:38:29.209126 2016] [http2:debug] [pid 3936] h2_session.c(956): > [client 10.0.0.4:52614] AH03200: h2_session(1) created, max_streams=100, > stream_mem=65536, workers_limit=4, workers_max=1, push_diary(type=1,N=256) > [Thu Aug 25 16:38:29.209163 2016] [http2:debug] [pid 3936] > h2_session.c(1058): [client 10.0.0.4:52614] AH03201: h2_session(1): start, > INITIAL_WINDOW_SIZE=65535, MAX_CONCURRENT_STREAMS=100 > [Thu Aug 25 16:38:29.209185 2016] [http2:debug] [pid 3936] > h2_session.c(2081): [client 10.0.0.4:52614] AH03079: h2_session(1): started > on localhost:443 > [Thu Aug 25 16:38:29.209200 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [INIT] -- init --> [BUSY] > [Thu Aug 25 16:38:29.209301 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv > FRAME[SETTINGS[length=12, stream=0]], frames=0/0 (r/s) > [Thu Aug 25 16:38:29.209325 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv > FRAME[WINDOW_UPDATE[stream=0, incr=12517377]], frames=1/0 (r/s) > [Thu Aug 25 16:38:29.209346 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[PRIORITY[length=5, > flags=0, stream=3]], frames=2/0 (r/s) > [Thu Aug 25 16:38:29.209364 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[PRIORITY[length=5, > flags=0, stream=5]], frames=3/0 (r/s) > [Thu Aug 25 16:38:29.209382 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[PRIORITY[length=5, > flags=0, stream=7]], frames=4/0 (r/s) > [Thu Aug 25 16:38:29.209400 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[PRIORITY[length=5, > flags=0, stream=9]], frames=5/0 (r/s) > [Thu Aug 25 16:38:29.209417 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[PRIORITY[length=5, > flags=0, stream=11]], frames=6/0 (r/s) > [Thu Aug 25 16:38:29.209465 2016] [http2:debug] [pid 3936] h2_stream.c(204): > [client 10.0.0.4:52614] AH03082: h2_stream(1-13): opened > [Thu Aug 25 16:38:29.209546 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv > FRAME[HEADERS[length=207, hend=1, stream=13, eos=1]], frames=7/0 (r/s) > [Thu Aug 25 16:38:29.209601 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv > FRAME[WINDOW_UPDATE[stream=13, incr=12451840]], frames=8/0 (r/s) > [Thu Aug 25 16:38:29.209804 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[SETTINGS[length=6, > stream=0]], frames=9/0 (r/s) > [Thu Aug 25 16:38:29.209833 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[SETTINGS[ack=1, > stream=0]], frames=9/1 (r/s) > [Thu Aug 25 16:38:29.209851 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent > FRAME[WINDOW_UPDATE[stream=0, incr=2147418112]], frames=9/2 (r/s) > [Thu Aug 25 16:38:29.209987 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.209978 2016] [ssl:debug] [pid 3936] > ssl_engine_kernel.c(366): [client 10.0.0.4:52614] AH02034: Initial (No.1) > HTTPS request received for child 1 (server localhost:443) > [Thu Aug 25 16:38:29.210258 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.210321 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[SETTINGS[ack=1, > stream=0]], frames=9/3 (r/s) > [Thu Aug 25 16:38:29.210378 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.210505 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.210543 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.210666 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.210702 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.210844 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.210878 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.211059 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.211095 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.211353 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.211388 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.211811 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.211848 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.212072 2016] [http2:debug] [pid 3936] h2_task.c(343): > [client 10.0.0.4:52614] AH03348: h2_task(1-13): open response to GET 10.0.0.1 > / > [Thu Aug 25 16:38:29.212151 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- data read --> [BUSY] > [Thu Aug 25 16:38:29.212195 2016] [http2:debug] [pid 3936] > h2_session.c(1436): [client 10.0.0.4:52614] AH03073: h2_stream(1-13): submit > response 200, REMOTE_WINDOW_SIZE=12582912 > [Thu Aug 25 16:38:29.212261 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent > FRAME[HEADERS[length=130, hend=1, stream=13, eos=0]], frames=10/3 (r/s) > [Thu Aug 25 16:38:29.212301 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[DATA[length=3041, > flags=1, stream=13, padlen=0]], frames=10/4 (r/s) > [Thu Aug 25 16:38:29.212357 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io (flow wait) --> [IDLE] > [Thu Aug 25 16:38:29.254198 2016] [http2:debug] [pid 3936] h2_stream.c(204): > [client 10.0.0.4:52614] AH03082: h2_stream(1-15): opened > [Thu Aug 25 16:38:29.254320 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv FRAME[HEADERS[length=52, > hend=1, stream=15, eos=1]], frames=10/5 (r/s) > [Thu Aug 25 16:38:29.254430 2016] [http2:debug] [pid 3936] h2_session.c(443): > [client 10.0.0.4:52614] AH03066: h2_session(1): recv > FRAME[WINDOW_UPDATE[stream=15, incr=12451840]], frames=11/5 (r/s) > [Thu Aug 25 16:38:29.254513 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [IDLE] -- data read --> [BUSY] > [Thu Aug 25 16:38:29.254576 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.254588 2016] [ssl:debug] [pid 3936] > ssl_engine_kernel.c(366): [client 10.0.0.4:52614] AH02034: Subsequent (No.2) > HTTPS request received for child 1 (server localhost:443), referer: > https://10.0.0.1/ > [Thu Aug 25 16:38:29.254769 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.254839 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io --> [WAIT] > [Thu Aug 25 16:38:29.254940 2016] [http2:debug] [pid 3936] h2_task.c(343): > [client 10.0.0.4:52614] AH03348: h2_task(1-15): open response to GET 10.0.0.1 > /icons/openlogo-75.png > [Thu Aug 25 16:38:29.254965 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [WAIT] -- wait cycle --> [BUSY] > [Thu Aug 25 16:38:29.255012 2016] [http2:debug] [pid 3936] > h2_session.c(1436): [client 10.0.0.4:52614] AH03073: h2_stream(1-15): submit > response 200, REMOTE_WINDOW_SIZE=12582912 > [Thu Aug 25 16:38:29.255082 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[HEADERS[length=62, > hend=1, stream=15, eos=0]], frames=12/5 (r/s) > [Thu Aug 25 16:38:29.255139 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[DATA[length=5754, > flags=1, stream=15, padlen=0]], frames=12/6 (r/s) > [Thu Aug 25 16:38:29.255180 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [BUSY] -- no io (flow wait) --> [IDLE] > [Thu Aug 25 16:38:34.262435 2016] [http2:debug] [pid 3936] h2_session.c(655): > [client 10.0.0.4:52614] AH03068: h2_session(1): sent FRAME[GOAWAY[error=0, > reason='timeout', last_stream=15]], frames=12/7 (r/s) > [Thu Aug 25 16:38:34.262672 2016] [http2:debug] [pid 3936] h2_session.c(752): > [client 10.0.0.4:52614] AH03069: session(1): sent GOAWAY, err=0, msg=timeout > [Thu Aug 25 16:38:34.262728 2016] [http2:debug] [pid 3936] > h2_session.c(1703): [client 10.0.0.4:52614] AH03078: h2_session(1): transit > [IDLE] -- local goaway --> [DONE] > [Thu Aug 25 16:38:34.262925 2016] [http2:debug] [pid 3936] h2_conn.c(215): > (70014)End of file found: [client 10.0.0.4:52614] AH03045: h2_session(1): > process, closing conn > [Thu Aug 25 16:38:34.263055 2016] [ssl:debug] [pid 3936] > ssl_engine_io.c(1033): [client 10.0.0.4:52614] AH02001: Connection closed to > child 1 with standard shutdown (server localhost:443) > ------- > > > Am 25.08.2016 um 15:39 schrieb Stefan Eissing: >> The following line does not look good: >> >> [Thu Aug 25 15:19:43.851331 2016] [ssl:warn] [pid 4275] AH01909: >> localhost:443:0 server certificate does NOT include an ID which matches the >> server name >> >> Can you make sure that all names do align? Maybe tweak /etc/hosts to make it >> match your localhost? >> >>> Am 25.08.2016 um 15:27 schrieb Max Meyer <redeemerofsouls...@web.de>: >>> >>> [Thu Aug 25 15:19:43.851331 2016] [ssl:warn] [pid 4275] AH01909: >>> localhost:443:0 server certificate does NOT include an ID which matches the >>> server name >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org >> For additional commands, e-mail: users-h...@httpd.apache.org >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
