<div dir="ltr"><div>You need to provide more information such as Firefox error messages, nginx config, server hostname, etc. You may find <a href="https://developer.mozilla.org/en-US/docs/Tools/Network_Monitor">https://developer.mozilla.org/en-US/docs/Tools/Network_Monitor</a> useful.</div><div><br></div><div>I did notice your cipher suites include blacklisted ciphers, but this shouldn't be an issue for outright failure. <a href="https://http2.github.io/http2-spec/#BadCipherSuites">https://http2.github.io/http2-spec/#BadCipherSuites</a></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 22, 2016 at 7:50 AM, Rajnesh Kumar Siwal <span dir="ltr"><<a href="mailto:rajnesh.siwal@gmail.com" target="_blank">rajnesh.siwal@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi,<br>We have recently deployed a site on http2 (with ALPN support) using nginx.<br></div>The site does not open in Firefox 47.<br>The site supports following ciphers :<br><b><br></b><b>Protocols</b>
<font color="green">TLS 1.2</font>
<font color="green">Yes</font>
TLS 1.1
Yes
TLS 1.0
Yes
SSL 3
No
SSL 2
No
<br><br>
<br>
<b>Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and SSL 2 suites at the end)</b>
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(<code>0xc030</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
(<code>0xc028</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
(<code>0xc014</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
256
TLS_RSA_WITH_AES_256_GCM_SHA384
(<code>0x9d</code>)
256
TLS_RSA_WITH_AES_256_CBC_SHA256
(<code>0x3d</code>)
256
TLS_RSA_WITH_AES_256_CBC_SHA
(<code>0x35</code>)
256
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
(<code>0x84</code>)
256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(<code>0xc02f</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(<code>0xc027</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
(<code>0xc013</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
128
TLS_RSA_WITH_AES_128_GCM_SHA256
(<code>0x9c</code>)
128
TLS_RSA_WITH_AES_128_CBC_SHA256
(<code>0x3c</code>)
128
TLS_RSA_WITH_AES_128_CBC_SHA
(<code>0x2f</code>)
128
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
(<code>0x41</code>)
128
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
(<code>0xc012</code>)
<span> ECDH secp256r1 (eq. 3072 bits RSA) FS</span>
112
TLS_RSA_WITH_3DES_EDE_CBC_SHA
(<code>0xa</code>)
112<span class="HOEnZb"><font color="#888888"><br clear="all"><div><div><br>-- <br><div data-smartmail="gmail_signature">Regards,<br>Rajnesh Kumar Siwal<br><br></div>
</div></div></font></span></div>
<br>_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br></blockquote></div><br></div>