Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [alpn]

ALPN (Application Layer Protocol Negotiation) is an extension for TLS and negotiates which protocol should be handled over a secure connection.

ALPN is defined in RFC 7301

8 questions
19
votes
1 answer

"server certificate verification OK" but "ALPN, server did not agree to a protocol"

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate verification OK .... * ALPN, server did not agree…
Craig Hicks
  • 657
  • 1
  • 5
  • 13
8
votes
1 answer

What does ALPN, server did not agree to a protocol mean?

I see this quite regularly when using various calls in curl. I'm not sure if its the root cause to some of my returns resulting in error 400 but as a newbie just curious more than anything.
John Toe
  • 81
  • 1
  • 1
  • 2
2
votes
1 answer

ALPN negotiation choosing http/1.1 over h2

I've created a DigitalOcean droplet with "LAMP 18.04" preset and did all updates. Configured a new virtual host and used certbot to configure HTTPS. So far everything was working fine. Then I tried to enable HTTP2: a2enmod http2 Added Protocols h2…
Xymanek
  • 123
  • 1
  • 6
1
vote
0 answers

Ubuntu 17.04 netty-tcnative ALPN not available for JDK SSL/TLS engine

I have a Java application (runnung under Oracle Java, but the same issue happens with OpenJDK) that uses netty-tcnative. It runs without issue on macOS, but when I try running it on Ubuntu 17.04 I get the following exception: SEVERE: ALPN not…
amb85
  • 111
  • 1
1
vote
4 answers

Why does HTTP/2 test say that I have ALPN support even if I only have OpenSSL1.0.1t?

This question is kind of related to this Why is ALPN not supported by my server? But in my case, the same test does say that ALPN is supported even if I am not using OpenSSL1.0.2 and only OpenSSL1.0.1t I am currently using Apache2.4.25 with h2…
Orphans
  • 1,404
  • 17
  • 26
0
votes
1 answer

HTTP/2, No ALPN negotiated, Apache, centos 7

I am trying to install and configure http2, following the www.tunetheweb.com/performance/http2 article. The problem may be No ALPN negotiated. If I run either of the following, I get No ALPN negotiated: $ openssl s_client -alpn h2 -connect…
user2810927
  • 1
0
votes
1 answer

How to check if my OpenSSL supports ALPN?

I search if my server is running OpenSSL with ALPN support. I need that to know if I have to install OpenSSL again but with ALPN support or I can skip that. I want to build HTTP/2 at DirectAdmin server. I've used openssl version -a | grep -i alpn…
TheTanadu
  • 133
  • 1
  • 7
0
votes
1 answer

nginx ALPN with debian 9 (stretch)

I just upgraded to Debian 9 (stretch) but system seems to not support ALPN negociation (after running a HTTP2 test). All guides over the internet still refers to Jessie (Debian 8) but none talks about Stretch (Debian 9). OpenSSL> version OpenSSL…
Tristan
  • 488
  • 2
  • 9
  • 26