Application-Layer Protocol Negotiation

Application-Layer Protocol Negotiation (ALPN) is a Transport Layer Security (TLS) extension that allows the application layer to negotiate which protocol should be performed over a secure connection in a manner that avoids additional round trips and which is independent of the application-layer protocols. It is needed by secure HTTP/2 connections, which improves the compression of web pages and reduces their latency compared to HTTP/1.x. The ALPN and HTTP/2 standards emerged from development work done by Google on the now withdrawn SPDY protocol.

Support

ALPN is supported by these libraries.

  • GnuTLS since version 3.2.0 released in May 2013.[1]
  • MatrixSSL since version 3.7.1 released in December 2014.[2]
  • Network Security Services since version 3.15.5 released in April 2014.[3]
  • OpenSSL since version 1.0.2 released in January 2015.[4]
  • LibreSSL since version 2.1.3 released in January 2015.[5]
  • mbed TLS (previously PolarSSL) since version 1.3.6 released in April 2014.[6]
  • SChannel since 8.1 / 2012 R2.
  • s2n since its original public release in June 2015.
  • wolfSSL (formerly CyaSSL) since version 3.7.0 released in October 2015. [7]
  • Go (in the standard library crypto/tls package) since version 1.4 released in December 2014. [8]
  • picotls[9]
  • JSSE in Java since JDK 9 released in September 2017.[10], backported to JDK 8 released in April 2020. [11]
  • BearSSL since version 0.3 [12]
  • Win32 SSPI since Windows 8.1 and Windows Server 2012 R2 were released October 18, 2013[13]

History

On July 11, 2014, ALPN was published as RFC 7301. ALPN replaces NPN [14]

TLS False Start was disabled in Google Chrome from version 20 (2012) onward except for websites with the earlier Next Protocol Negotiation (NPN) extension.[15]

Example

ALPN is a TLS extension which is sent on the initial TLS handshake 'Client Hello', and it lists the protocols that the client (for example the web browser) supports:

    Handshake Type: Client Hello (1)
    Length: 141
    Version: TLS 1.2 (0x0303)
    Random: dd67b5943e5efd0740519f38071008b59efbd68ab3114587...
    Session ID Length: 0
    Cipher Suites Length: 10
    Cipher Suites (5 suites)
    Compression Methods Length: 1
    Compression Methods (1 method)
    Extensions Length: 90
    [other extensions omitted]
    Extension: application_layer_protocol_negotiation (len=14)
        Type: application_layer_protocol_negotiation (16)
        Length: 14
        ALPN Extension Length: 12
        ALPN Protocol
            ALPN string length: 2
            ALPN Next Protocol: h2
            ALPN string length: 8
            ALPN Next Protocol: http/1.1

The resulting 'Server Hello' from the web server will also contain the ALPN extension, and it confirms which protocol will be used for the HTTP request:

    Handshake Type: Server Hello (2)
    Length: 94
    Version: TLS 1.2 (0x0303)
    Random: 44e447964d7e8a7d3b404c4748423f02345241dcc9c7e332...
    Session ID Length: 32
    Session ID: 7667476d1d698d0a90caa1d9a449be814b89a0b52f470e2d...
    Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    Compression Method: null (0)
    Extensions Length: 22
    [other extensions omitted]
    Extension: application_layer_protocol_negotiation (len=5)
        Type: application_layer_protocol_negotiation (16)
        Length: 5
        ALPN Extension Length: 3
        ALPN Protocol
            ALPN string length: 2
            ALPN Next Protocol: h2
gollark: ZenScript is a horrible language.
gollark: Which would need something like four other size-24 reactors providing fuel.
gollark: 3.84MRF/t on deuterium/tritium.
gollark: Depends on the fuel.
gollark: You use powered lights?

References
  1. "gnutls 3.2.0". Archived from the original on 2016-01-31. Retrieved 2015-01-26.
  2. "MatrixSSL - News". 2014-12-04. Archived from the original on 2015-02-14. Retrieved 2015-01-26.
  3. "NSS 3.15.5 release notes". Mozilla Developer Network. Mozilla. Retrieved 2015-01-26.
  4. "OpenSSL 1.0.2 release notes". The OpenSSL Project. The OpenSSL Project. 2015-01-22. Retrieved 2015-01-26.
  5. "LibreSSL 2.1.3 released". 2015-01-22. Retrieved 2015-01-26.
  6. "Download overview - PolarSSL". 2014-04-11. Retrieved 2015-01-26.
  7. "wolfSSL Release Change Log". 2015-10-26. Retrieved 2015-09-11.
  8. "Go 1.4 Release Notes". 2014-12-10. Retrieved 2017-11-28.
  9. "Picotls". Github. Retrieved 2 August 2018.
  10. "JEP 244: TLS Application-Layer Protocol Negotiation Extension". 2017-08-07. Retrieved 2018-08-29.
  11. {{cite web|title=Release Note: TLS Application-Layer Protocol Negotiation Extension|url=https://bugs.openjdk.java.net/browse/JDK-8242894%7Cdate=2020-04-30%7Caccessdate=2020-06-11}
  12. "BearSSL - Changelog". Retrieved 2010-09-08.
  13. "What's New in TLS/SSL (Schannel SSP)". Retrieved 2020-03-30.
  14. Langley, Adam. "ยป NPN and ALPN". Retrieved 2 April 2013.
  15. Langley, Adam. "False Start's Failure (11 Apr 2012)". Retrieved 25 September 2013.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.