
证书是 letsencrypt 配置如下
server { #listen 80; listen 443 ssl http2; server_name areyoufuckingme.com; ssl_certificate /etc/letsencrypt/live/areyoufuckingme.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/areyoufuckingme.com/privkey.pem; ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; index index.php index.html index.htm; set $root_path '/Data/areyoufuckingme/public'; root $root_path; location / { try_files $uri $uri/ /index.php?_url=$uri&$args; } location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/tmp/php-cgi.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } location /.well-known { allow all; } } Nginx开启了h2模块
nginx version: nginx/1.10.0 built by gcc 4.4.7 20120313 (Red Hat 4.4.7-17) (GCC) built with OpenSSL 1.0.1e-fips 11 Feb 2013 TLS SNI support enabled configure arguments: --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-ipv6 --with-http_sub_module --with-ld-opt='-ljemalloc' 目前的问题是 ssl 生效了 但是 http2 没生效。。
好奇怪 只有一个css和js开始H2 剩下的不是h1就是spdy...
1 Leafove 2016-09-21 09:34:39 +08:00 built with OpenSSL 1.0.1e-fips 11 Feb 2013 |
2 lhbc 2016-09-21 09:36:37 +08:00 Chrome 不支持 NPN ,只支持 ALPN OpenSSL 1.0.1 系列都不支持 ALPN ,你需要用 OpenSSL 1.0.2h 或者 OpenSSL 1.1.0 来编译 nginx 另外,你这 gcc 版本够老的…… |
3 kkzxak47 2016-09-21 09:37:26 +08:00 via Android 记得 OpenSSL 需要 1.0.2 以上 |
4 DesignerSkyline 2016-09-21 10:01:05 +08:00 via iPad 发帖前建议搜一下本站,已经有了相关帖子了 t/286552 |
5 alect 2016-09-21 10:30:33 +08:00 openssl 版本太低,用最新版编译 nginx |
6 xiaoz 2016-09-21 11:26:03 +08:00 楼上的正解,同时您可以参考下: https://www.xiaoz.me/archives/7225 |
7 bazingaterry 2016-09-21 11:48:35 +08:00 |
8 FlowMEMO 2016-09-21 12:21:55 +08:00 |