https://blog.iphpo.com/tags/openssl/Recent content in openssl on 戲中話Hugozh-twherb09638@gmail.com (Herb)herb09638@gmail.com (Herb)Thu, 27 Jul 2017 00:00:00 +0800https://blog.iphpo.com/blog/2017/07/centos%E4%B8%8A%E7%9A%84nginx%E5%9C%A8%E6%96%B0%E7%89%88chrome%E4%B8%8A%E7%84%A1%E6%B3%95%E5%95%9F%E5%8B%95-http2/Thu, 27 Jul 2017 00:00:00 +0800herb09638@gmail.com (Herb)https://blog.iphpo.com/blog/2017/07/centos%E4%B8%8A%E7%9A%84nginx%E5%9C%A8%E6%96%B0%E7%89%88chrome%E4%B8%8A%E7%84%A1%E6%B3%95%E5%95%9F%E5%8B%95-http2/<p>我一直以為 我在設定檔裡加入http2 就會開啟http2</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">server <span class="o">{</span> </span></span><span class="line"><span class="cl"> listen <span class="m">443</span> ssl http2<span class="p">;</span> </span></span></code></pre></div><p>結果我用 Chrome 內建的工具檢查</p> <p>卻沒有啟動 HTTP/2</p> <p><a href="chrome://net-internals/#http2">chrome://net-internals/#http2</a></p> <p>這才驚覺我的網站一直都沒有啟動HTTP/2</p> <p>原來是 CentOS 內建的OpenSSL版本</p> <p>沒有支援 ALPN</p> <p>導致Chrome會自動切換成HTTP/1.1</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl"> <span class="c1"># ./openssl version </span> </span></span><span class="line"><span class="cl">OpenSSL 1.0.1e-fips <span class="m">11</span> Feb <span class="m">2013</span> </span></span></code></pre></div><p>但是用 yum update這就已經是最新版本</p> <p>所以只好自己編譯新版OpenSSL了</p>