HTTP2 site does not loads on firefox
Richard Stanway
r1ch+nginx at teamliquid.net
Wed Jun 22 18:59:25 UTC 2016
You need to provide more information such as Firefox error messages, nginx
config, server hostname, etc. You may find
https://developer.mozilla.org/en-US/docs/Tools/Network_Monitor useful.
I did notice your cipher suites include blacklisted ciphers, but this
shouldn't be an issue for outright failure.
https://http2.github.io/http2-spec/#BadCipherSuites
On Wed, Jun 22, 2016 at 7:50 AM, Rajnesh Kumar Siwal <
rajnesh.siwal at gmail.com> wrote:
> Hi,
> We have recently deployed a site on http2 (with ALPN support) using nginx.
> The site does not open in Firefox 47.
> The site supports following ciphers :
>
> *Protocols* TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes SSL 3 No SSL 2 No
>
>
> *Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and
> SSL 2 suites at the end)* TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
> ECDH secp256r1 (eq. 3072 bits RSA) FS 256
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp256r1 (eq. 3072
> bits RSA) FS 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH
> secp256r1 (eq. 3072 bits RSA) FS 256 TLS_RSA_WITH_AES_256_GCM_SHA384 (
> 0x9d) 256 TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) 256
> TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
> (0x84) 256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH
> secp256r1 (eq. 3072 bits RSA) FS 128
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp256r1 (eq. 3072
> bits RSA) FS 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH
> secp256r1 (eq. 3072 bits RSA) FS 128 TLS_RSA_WITH_AES_128_GCM_SHA256 (
> 0x9c) 128 TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) 128
> TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
> (0x41) 128 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012) ECDH secp256r1
> (eq. 3072 bits RSA) FS 112 TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112
>
> --
> Regards,
> Rajnesh Kumar Siwal
>
>
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160622/709b7ab7/attachment.html>
More information about the nginx
mailing list