{"action":"created","issue":{"url":"https://api.github.com/repos/alibaba/tengine/issues/707","repository_url":"https://api.github.com/repos/alibaba/tengine","labels_url":"https://api.github.com/repos/alibaba/tengine/issues/707/labels{/name}","comments_url":"https://api.github.com/repos/alibaba/tengine/issues/707/comments","events_url":"https://api.github.com/repos/alibaba/tengine/issues/707/events","html_url":"https://github.com/alibaba/tengine/issues/707","id":139844306,"number":707,"title":"ssl和http2不兼容，添加http2后无法进行加密连接。","user":{"login":"EliBing","id":3619266,"avatar_url":"https://avatars.githubusercontent.com/u/3619266?v=3","gravatar_id":"","url":"https://api.github.com/users/EliBing","html_url":"https://github.com/EliBing","followers_url":"https://api.github.com/users/EliBing/followers","following_url":"https://api.github.com/users/EliBing/following{/other_user}","gists_url":"https://api.github.com/users/EliBing/gists{/gist_id}","starred_url":"https://api.github.com/users/EliBing/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EliBing/subscriptions","organizations_url":"https://api.github.com/users/EliBing/orgs","repos_url":"https://api.github.com/users/EliBing/repos","events_url":"https://api.github.com/users/EliBing/events{/privacy}","received_events_url":"https://api.github.com/users/EliBing/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-03-10T10:14:25Z","updated_at":"2016-04-20T12:29:45Z","closed_at":null,"body":"http2 添加 后在  IE 11、chrome 48以下等浏览器都可以打开，chrome 49版本和firefox无法打开。\r\n本来以为是ssl_ciphers配置问题（其实没问题），后来测试删除 http2 就可正常访问。\r\n附上ssl配置，证书代码未包含：\r\n\r\n<pre>\r\nssl_session_cache           shared:SSL:50m;\r\nssl_session_timeout 1d;\r\nssl_stapling                on;\r\nssl_stapling_verify     on;\r\nssl_session_tickets off;\r\nssl_protocols           TLSv1 TLSv1.1 TLSv1.2;\r\n# Maximum secure cipher list from https://cipherli.st/. Not support some clients: IF6/XP, IE8/XP, Java 6u45, Java 7u25, OpenSSL 0.9.8y\r\n#ssl_ciphers                 \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH\";\r\n# Less secure cipher list from https://cipherli.st/. Not support some clients: IF6/XP, Java 6u45\r\n\r\nssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';\r\nssl_prefer_server_ciphers on;\r\n\r\n# Use unique [Diffie-Hellman Group](https://weakdh.org/sysadmin.html): `openssl dhparam -out dhparams.pem 2048`\r\nssl_dhparam                 dhparams.pem;\r\nadd_header          Strict-Transport-Security max-age=15768000;\r\nadd_header                  X-Content-Type-Options nosniff;\r\n\r\nresolver 8.8.8.8 8.8.4.4 valid=300s;\r\nresolver_timeout 5s;\r\n</pre>"},"comment":{"url":"https://api.github.com/repos/alibaba/tengine/issues/comments/212404646","html_url":"https://github.com/alibaba/tengine/issues/707#issuecomment-212404646","issue_url":"https://api.github.com/repos/alibaba/tengine/issues/707","id":212404646,"user":{"login":"cfsego","id":1188207,"avatar_url":"https://avatars.githubusercontent.com/u/1188207?v=3","gravatar_id":"","url":"https://api.github.com/users/cfsego","html_url":"https://github.com/cfsego","followers_url":"https://api.github.com/users/cfsego/followers","following_url":"https://api.github.com/users/cfsego/following{/other_user}","gists_url":"https://api.github.com/users/cfsego/gists{/gist_id}","starred_url":"https://api.github.com/users/cfsego/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cfsego/subscriptions","organizations_url":"https://api.github.com/users/cfsego/orgs","repos_url":"https://api.github.com/users/cfsego/repos","events_url":"https://api.github.com/users/cfsego/events{/privacy}","received_events_url":"https://api.github.com/users/cfsego/received_events","type":"User","site_admin":false},"created_at":"2016-04-20T12:29:45Z","updated_at":"2016-04-20T12:29:45Z","body":"我输错了，是“你可能要把tlsv1.2放前面”"}}