HTTP2 Firefox Compatibility

[SplitIce]

Hi All,

Yesterday we discovered a possible compatibility issue with a certain
configuration, HTTP2 and Firefox. This configuration works successfully in
Chrome and other HTTP2 enabled browsers, however Firefox users are unable
to connect (connection reset).

The pertinent part of the configuration is a port with SSLv3 enabled in the
supported protocols (risk associated with POODLE attack has been accounted
and mitigated for separately).

Test configuration:

server {
listen 443 ssl http2;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
[...]
}

Connect with Firefox (fail), connect with Chrome (pass).

Regards,
Mathew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20150928/a9a30420/attachment.html>