appleboy / appleboy/server-configs

HTTP2 Support with wrong ssl_ciphers

Open
#3 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Nginx
Stars
14
Forks
8
PR merge metrics
No merged PRs in 30d

Description

This config does not work in Self Signed SSL HTTP2.

``` javascripts
ssl_ciphers HIGH:!aNULL:!MD5;
```

which will cause https://tools.ietf.org/html/rfc7540#appendix-A
Try

``` javascripts
ssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA";
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the Nginx configuration containing the HTTP/2 SSL settings and reproduce the failure with a self-signed certificate. Compare its ssl_ciphers value with the cipher requirements linked in the issue, then verify that HTTP/2 starts successfully and the configuration remains valid.

Written by the indexing model from the issue text.

Assessment

Tech stack
nginx
Domain
devops, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.