Changeset f51d359 in mod_gnutls


Ignore:
Timestamp:
Jan 25, 2020, 4:15:44 PM (9 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
8daef10
Parents:
e819f13
Message:

Remove obsolete restrictions on HTTP/2 from documentation

GnuTLS versions before 3.6.3 aren't supported by mod_gnutls any more,
so restrictions applying only to older versions are irrelevant.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • doc/mod_gnutls_manual.md

    re819f13 rf51d359  
    6161configuration other than a [certificate chain](#gnutlscertificatefile)
    6262with OCSP support.
    63 
    64 Note on HTTP/2
    65 --------------
    66 
    67 HTTP/2 is supported with `mod_gnutls`. However, full support requires
    68 compiling with GnuTLS 3.6.3 or later. When using lower versions all
    69 virtual hosts using `mod_gnutls` with overlapping IP/port combinations
    70 need to use identical `Protocols` directives for protocol negotiation
    71 to work correctly.
    72 
    73 The technical reason is that using HTTP/2 requires ALPN (Application
    74 Layer Protocol Negotiation) to be set up before GnuTLS parses the TLS
    75 ClientHello message, but earlier hooks cannot use
    76 `gnutls_server_name_get()` to retrieve SNI (Server Name Indication)
    77 data for virtual host selection. Because of this `mod_gnutls` provides
    78 its own early SNI parser, which requires the `gnutls_ext_raw_parse()`
    79 function introduced in GnuTLS 3.6.3 to retrieve the extension data in
    80 a *pre* client hello hook.
    81 
    82 During build `./configure` will report "Early SNI: yes" if your
    83 version of GnuTLS is new enough.
    8463
    8564* * * * *
     
    831810        GnuTLSCertificateFile conf/tls/site3.crt
    832811        GnuTLSKeyFile conf/tls/site3.key
    833         # Enable HTTP/2. With GnuTLS before version 3.6.3 all
    834         # virtual hosts in this example would have to share this
    835         # directive to work correctly.
     812        # Enable HTTP/2
    836813        Protocols h2 http/1.1
    837814</VirtualHost>
Note: See TracChangeset for help on using the changeset viewer.