{"action":"created","issue":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/597","repository_url":"https://api.github.com/repos/cloudflare/cfssl","labels_url":"https://api.github.com/repos/cloudflare/cfssl/issues/597/labels{/name}","comments_url":"https://api.github.com/repos/cloudflare/cfssl/issues/597/comments","events_url":"https://api.github.com/repos/cloudflare/cfssl/issues/597/events","html_url":"https://github.com/cloudflare/cfssl/pull/597","id":148678544,"number":597,"title":"[WIP] Add HTTP/2 and SPDY Reporting","user":{"login":"APTy","id":9010671,"avatar_url":"https://avatars.githubusercontent.com/u/9010671?v=3","gravatar_id":"","url":"https://api.github.com/users/APTy","html_url":"https://github.com/APTy","followers_url":"https://api.github.com/users/APTy/followers","following_url":"https://api.github.com/users/APTy/following{/other_user}","gists_url":"https://api.github.com/users/APTy/gists{/gist_id}","starred_url":"https://api.github.com/users/APTy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/APTy/subscriptions","organizations_url":"https://api.github.com/users/APTy/orgs","repos_url":"https://api.github.com/users/APTy/repos","events_url":"https://api.github.com/users/APTy/events{/privacy}","received_events_url":"https://api.github.com/users/APTy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-04-15T14:40:04Z","updated_at":"2016-05-03T00:27:57Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/cloudflare/cfssl/pulls/597","html_url":"https://github.com/cloudflare/cfssl/pull/597","diff_url":"https://github.com/cloudflare/cfssl/pull/597.diff","patch_url":"https://github.com/cloudflare/cfssl/pull/597.patch"},"body":"This PR improves `cfssl scan` by using ALPN to determine which application-layer protocols that a server supports (among HTTP/1, HTTP/2, and SPDY/3). The `ALPN` scanner is introduced as part of the `TLSHandshake` family of scanners (might need to be in a new family of `TLSExtensions`).\r\n\r\n**Example of `cfssl scan`**\r\n```\r\n$ cfssl scan -scanner=ALPN cloudflare.com\r\nScanning cloudflare.com...\r\n=== cloudflare.com ===\r\n{\r\n  \"TLSHandshake\": {\r\n    \"ALPN\": {\r\n      \"grade\": \"Good\",\r\n      \"output\": {\r\n        \"HTTP/1\": true,\r\n        \"HTTP/2\": true,\r\n        \"SPDY/3\": true\r\n      }\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n**Example of `cfssl scan -list`**\r\n```\r\n$ cfssl scan -list\r\n\r\n...\r\n\r\n\"TLSHandshake\": {\r\n    \"description\": \"Scans for host's SSL/TLS version and cipher suite negotiation\",\r\n    \"scanners\": {\r\n      \"ALPN\": {\r\n        \"description\": \"Determines host's supported application-layer protocols\"\r\n      },\r\n\r\n...\r\n```\r\nResolves #444\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/comments/216403554","html_url":"https://github.com/cloudflare/cfssl/pull/597#issuecomment-216403554","issue_url":"https://api.github.com/repos/cloudflare/cfssl/issues/597","id":216403554,"user":{"login":"APTy","id":9010671,"avatar_url":"https://avatars.githubusercontent.com/u/9010671?v=3","gravatar_id":"","url":"https://api.github.com/users/APTy","html_url":"https://github.com/APTy","followers_url":"https://api.github.com/users/APTy/followers","following_url":"https://api.github.com/users/APTy/following{/other_user}","gists_url":"https://api.github.com/users/APTy/gists{/gist_id}","starred_url":"https://api.github.com/users/APTy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/APTy/subscriptions","organizations_url":"https://api.github.com/users/APTy/orgs","repos_url":"https://api.github.com/users/APTy/repos","events_url":"https://api.github.com/users/APTy/events{/privacy}","received_events_url":"https://api.github.com/users/APTy/received_events","type":"User","site_admin":false},"created_at":"2016-05-03T00:27:57Z","updated_at":"2016-05-03T00:27:57Z","body":"@kisom Yeah I definitely am getting that same issue when I run this test. But it runs fine when its not inside the `cfssl` package generally. I've tried digging into any project-specific TLS settings that could be the cause, but have had no luck so far. Any thoughts?"}}