# HTTP/2 and HTTPS

**URL:** <https://www.ruby-forum.com/t/http-2-and-https/244280>\
**Category:** NGINX\
**Created:** [March 14, 2016, 11:44pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280 "2016-03-14T23:44:08Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sadaf\_N](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/858c86/32.png) [@Sadaf\_N](https://www.ruby-forum.com/u/Sadaf_N)\
**Post date:** [March 14, 2016, 11:44pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/1 "2016-03-14T23:44:08Z")

</div>

Hi everyone,

I have strange issue with nginx 1.9.12. I have 3 IP addresses as a  
server  
name that are alias IPs on a single Ubuntu server 15.10. Each servername  
related to specific protocol:

http:

server {  
listen 80;  
server\_name 192.168.1.161;

```
#charset koi8-r;
#access_log /var/log/nginx/log/host.access.log main;

location / {
    root /usr/share/nginx/static;
    index index.html;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
    root /usr/share/nginx/html;
}

```

}

https:

server {  
listen 443 ssl;  
server\_name 192.168.1.162;

```
#charset koi8-r;
#access_log /var/log/nginx/log/host.access.log main;

root /usr/share/nginx/static;
index index.html index.htm;

ssl_certificate /etc/nginx/tls/certificate.crt;
ssl_certificate_key /etc/nginx/tls/privatekey.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH+kEECDH+AESGCM:HIGH+kEECDH:HIGH+kEDH:HIGH:!aNULL;

location / {
   try_files $uri $uri/ =404;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
    root /usr/share/nginx/html;
}

```

}

http2:

server {  
listen 443 ssl http2;  
server\_name 192.168.1.163;

```
#charset koi8-r;
#access_log /var/log/nginx/log/host.access.log main;

ssl_certificate /etc/nginx/tls/certificate.crt;
ssl_certificate_key /etc/nginx/tls/privatekey.key;

location / {
    root /usr/share/nginx/static;
    index index.html index.htm;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
    root /usr/share/nginx/html;
}

```

}

As you see for those servers content is the same, and it is served well.  
However, if I use webconsole of Firefox I am getting that https site is  
a  
http2 site and http2 site is http2. The same situation is in Internet  
explorer.

What I am doing wrong?

Thank you.

Posted at Nginx Forum:

> **[HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265326#msg-265326)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 12:09am UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/2 "2016-03-15T00:09:52Z")

</div>

You probably need to specify the IP on the listen directive if you want  
different configurations of listening ports on different IPs.

On Mon, Mar 14, 2016 at 11:43 PM, Roswebnet  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 12:39am UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/3 "2016-03-15T00:39:39Z")

</div>

Thank you for your fast response.

However, could you please provide an example of “IP on the listen  
directive”

I am accessing content from Firefox like [https://192.168.1.162](https://192.168.1.162) for https  
connection and  
[https://192.168.1.163](https://192.168.1.163) for http2. Moreover, those ip also accessible by  
http:// and served also well, but in my opinion it should gave some kind  
of  
error, because those server names do not have port 80 configured.

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265328#msg-265328)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 1:38am UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/4 "2016-03-15T01:38:39Z")

</div>

Hi,

a similar issue has been discussed here:

> **[Possible bug http2 module](https://forum.nginx.org/read.php?2,264392,264392)**
>
> Hello, I am running a WordPress multisite install and recently turned off http2 on the domain in order to use a third party module which evidently doesn't play nicely with http2 (echo module). In testing I noticed that the site was still being served...

In short: If you have any http2 directives for a port in your  
configuration, every connection on that port can use http2.  
Im not sure if specifying the listen IP will help in this case, but its  
worth a try. Modify your listen directives to “listen ip:port options;”,  
for example for your last vhost: “listen 192.168.1.163:443 ssl http2;”

Mit Freundlichen Grüßen  
Sven Kirschbaum

2016-03-15 0:39 GMT+01:00 Roswebnet [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid):

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 9:02am UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/5 "2016-03-15T09:02:02Z")

</div>

## RTFM (listen [http://nginx.org/en/docs/http/ngx\_http\_core\_module.html#listen](http://nginx.org/en/docs/http/ngx_http_core_module.html#listen) directive)? :o)

_B. R._

On Tue, Mar 15, 2016 at 12:39 AM, Roswebnet  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 3:24pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/6 "2016-03-15T15:24:06Z")

</div>

Hi,

I tried this one:  
http.conf:  
listen 192.168.1.161:80;

https.conf:  
listen 192.168.1.162:443 ssl;

http2.conf:  
listen 192.168.1.163:443 ssl http2;

Looks like it solve issue especially when I do request for the first  
time.  
For the second time in IE I can get https in place of http2. Firefox  
mostly  
do not provide such behaviour. May it lay on certificate? I use the same  
certificate for both HTTPS and HTTP2. And certificate was issued for  
server  
hostname not for vhost IP.

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265349#msg-265349)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 4:14pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/7 "2016-03-15T16:14:55Z")

</div>

On Tuesday 15 March 2016 10:23:37 Roswebnet wrote:

> listen 192.168.1.163:443 ssl http2;
> 
> Looks like it solve issue especially when I do request for the first time.  
> For the second time in IE I can get https in place of http2. Firefox mostly  
> do not provide such behaviour. May it lay on certificate? I use the same  
> certificate for both HTTPS and HTTP2. And certificate was issued for server  
> hostname not for vhost IP.

Your version of IE may not support HTTP/2 negotiation using NPN, or may  
not  
support HTTP/2 at all.

wbr, Valentin V. Bartenev

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 4:55pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/8 "2016-03-15T16:55:14Z")

</div>

I am using W10Pro and IE 11.162.10586.0 Desktop version.

> **[HTTP/2](https://en.wikipedia.org/wiki/HTTP/2)**
>
> HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web. It was derived from the earlier experimental SPDY protocol, originally developed by Google. HTTP/2 was developed by the HTTP Working Group (also called httpbis, where "bis" means "twice") of the Internet Engineering Task Force (IETF). HTTP/2 is the first new version of HTTP since HTTP/1.1, which was standardized in RFC 2068 in 1997. The Working Group presented HTTP/2 to t The standard...

“The standardization effort was supported by Chrome, Opera, Firefox,  
Internet Explorer 11, Safari, Amazon Silk and Edge browsers.[9] Most  
major  
browsers added HTTP/2 support by the end of 2015.”

In addition:

> **[HTTP/2 replaces SPDY/3 (Windows)](https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/compatibility/dn905221(v=vs.85)?redirectedfrom=MSDN)**

Of course, it is maybe some wrong implementation of Microsoft…

Still a bit strange.

P.S.: F12 tools of Chrome do not catch type of protocol. At least I  
could  
not find this functionality by default. Therefore, I use only IE and FF.

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265362#msg-265362)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 5:44pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/9 "2016-03-15T17:44:18Z")

</div>

On Tuesday 15 March 2016 11:54:33 Roswebnet wrote:

> Of course, it is maybe some wrong implementation of Microsoft…
> 
> Still a bit strange.  
> [..]

None of the links above mention that IE supports HTTP/2 negotiation  
using NPN.

I guess it supports only ALPN, which isn’t supported by OpenSSL  
version in your Ubuntu 15.10.

> P.S.: F12 tools of Chrome do not catch type of protocol. At least I could  
> not find this functionality by default. Therefore, I use only IE and FF.

[..]

You can find all the information on “chrome://net-internals” page.

wbr, Valentin V. Bartenev

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 7:32pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/10 "2016-03-15T19:32:23Z")

</div>

On Tuesday 15 March 2016 13:33:31 Roswebnet wrote:

> root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl version -a -v -b -o -f -p -d  
> -DSHA512\_ASM -DMD5\_ASM -DAES\_ASM -DVPAES\_ASM -DBSAES\_ASM -DWHIRLPOOL\_ASM  
> Actually I should have OpenSSL 1.0.2d
> 
> In addition, the LIA-RP-VS-WEB is a XEN guest.

[..]

You should also check the output of “nginx -V” command to be sure  
that nginx is built with this version of OpenSSL

wbr, Valentin V. Bartenev

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 15, 2016, 6:33pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/11 "2016-03-15T18:33:58Z")

</div>

> None of the links above mention that IE supports HTTP/2 negotiation  
> using NPN.

Agree.

> I guess it supports only ALPN, which isn’t supported by OpenSSL  
> version in your Ubuntu 15.10.

I have just researched installed openssl.

root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl version -a -v -b -o -f -p -d  
OpenSSL 1.0.2g 1 Mar 2016  
built on: reproducible build, date unspecified  
platform: debian-amd64  
options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) blowfish(idx)  
compiler: gcc -I. -I.. -I../include -fPIC -DOPENSSL\_PIC  
-DOPENSSL\_THREADS  
-D\_REENTRANT -DDSO\_DLFCN -DHAVE\_DLFCN\_H -m64 -DL\_ENDIAN -g -O2  
-fstack-protector-strong -Wformat -Werror=format-security  
-D\_FORTIFY\_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro  
-Wa,–noexecstack  
-Wall -DMD32\_REG\_T=int -DOPENSSL\_IA32\_SSE2 -DOPENSSL\_BN\_ASM\_MONT  
-DOPENSSL\_BN\_ASM\_MONT5 -DOPENSSL\_BN\_ASM\_GF2m -DSHA1\_ASM -DSHA256\_ASM  
-DSHA512\_ASM -DMD5\_ASM -DAES\_ASM -DVPAES\_ASM -DBSAES\_ASM -DWHIRLPOOL\_ASM  
-DGHASH\_ASM -DECP\_NISTZ256\_ASM  
OPENSSLDIR: “/usr/lib/ssl”

According this note:  
[https://www.openssl.org/news/openssl-1.0.2-notes.html](https://www.openssl.org/news/openssl-1.0.2-notes.html)

Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015]:  
[..]  
•ALPN support.

Therefore, ALPN is supported and should work with IE. Am I right?  
Actually I should have OpenSSL 1.0.2d

In addition, the LIA-RP-VS-WEB is a XEN guest.

Thank you for your tip about chrome. I can see and investigate the  
protocol  
information:

454: HTTP2\_SESSION  
192.168.100.163:443 (DIRECT)  
Start Time: 2016-03-15 18:13:13.832

t=1138095 [st= 0] +HTTP2\_SESSION [dt=180146]  
 → host = “192.168.100.163:443”  
 → proxy = “DIRECT”  
t=1138095 [st= 0] HTTP2\_SESSION\_INITIALIZED  
 → protocol = “h2”  
 → source\_dependency = 453 (SOCKET)  
t=1138095 [st= 0] HTTP2\_SESSION\_SEND\_SETTINGS

[..]

Posted at Nginx Forum:  
[https://forum.nginx.org/read.php?2,265326,265365#msg-265365](https://forum.nginx.org/read.php?2,265326,265365#msg-265365)

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 16, 2016, 12:10pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/12 "2016-03-16T12:10:43Z")

</div>

On US15.10 I have nginx:

root@LIA-RP-VS-WEB:/etc/nginx/tls# nginx -V  
nginx version: nginx/1.9.12  
built by gcc 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2)  
built with OpenSSL 1.0.2d 9 Jul 2015  
TLS SNI support enabled  
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx  
–modules-path=/etc/nginx/modules --conf-path=/etc/nginx/nginx.conf  
–error-log-path=/var/log/nginx/error.log  
–http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid  
–lock-path=/var/run/nginx.lock  
–http-client-body-temp-path=/var/cache/nginx/client\_temp  
–http-proxy-temp-path=/var/cache/nginx/proxy\_temp  
–http-fastcgi-temp-path=/var/cache/nginx/fastcgi\_temp  
–http-uwsgi-temp-path=/var/cache/nginx/uwsgi\_temp  
–http-scgi-temp-path=/var/cache/nginx/scgi\_temp --user=nginx  
–group=nginx  
–with-http\_ssl\_module --with-http\_realip\_module  
–with-http\_addition\_module  
–with-http\_sub\_module --with-http\_dav\_module --with-http\_flv\_module  
–with-http\_mp4\_module --with-http\_gunzip\_module  
–with-http\_gzip\_static\_module --with-http\_random\_index\_module  
–with-http\_secure\_link\_module --with-http\_stub\_status\_module  
–with-http\_auth\_request\_module --with-http\_xslt\_module=dynamic  
–with-http\_image\_filter\_module=dynamic --with-http\_geoip\_module=dynamic  
–with-threads --with-stream --with-stream\_ssl\_module  
–with-http\_slice\_module --with-mail --with-mail\_ssl\_module  
–with-file-aio  
–with-http\_v2\_module --with-cc-opt=‘-g -O2 -fstack-protector-strong  
-Wformat -Werror=format-security -Wp,-D\_FORTIFY\_SOURCE=2’  
–with-ld-opt=‘-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,–as-needed’  
–with-ipv6

OpenSSL

root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl version -a -v -b -o -f -p -d  
OpenSSL 1.0.2g 1 Mar 2016  
built on: reproducible build, date unspecified  
platform: debian-amd64  
options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) blowfish(idx)  
compiler: gcc -I. -I… -I…/include -fPIC -DOPENSSL\_PIC  
-DOPENSSL\_THREADS  
-D\_REENTRANT -DDSO\_DLFCN -DHAVE\_DLFCN\_H -m64 -DL\_ENDIAN -g -O2  
-fstack-protector-strong -Wformat -Werror=format-security  
-D\_FORTIFY\_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro  
-Wa,–noexecstack  
-Wall -DMD32\_REG\_T=int -DOPENSSL\_IA32\_SSE2 -DOPENSSL\_BN\_ASM\_MONT  
-DOPENSSL\_BN\_ASM\_MONT5 -DOPENSSL\_BN\_ASM\_GF2m -DSHA1\_ASM -DSHA256\_ASM  
-DSHA512\_ASM -DMD5\_ASM -DAES\_ASM -DVPAES\_ASM -DBSAES\_ASM -DWHIRLPOOL\_ASM  
-DGHASH\_ASM -DECP\_NISTZ256\_ASM  
OPENSSLDIR: “/usr/lib/ssl”

Problem with IE 11 is still exist. First connection to static page is  
HTTP/2  
and if I do refresh I am getting HTTPS in developers tools. FF and  
Chrome do  
not have this problem.

I think (I feel, my intuition tells me 🙂 ) it may lay on self signed  
certificate. I have create it following the  
[RFC 7540 - Hypertext Transfer Protocol Version 2 (HTTP/2)](https://tools.ietf.org/html/rfc7540#section-9.2) requirements.

root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl ecparam -out privatekey.key  
-name  
prime256v1 -genkey  
root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl req -new -key privatekey.key  
-out  
csr.pem  
root@LIA-RP-VS-WEB:/etc/nginx/tls# openssl req -x509 -days 365 -key  
privatekey.key -in csr.pem -out certificate.crt  
root@LIA-RP-VS-WEB:/etc/nginx/tls# ll  
total 20  
drwxr-xr-x 2 root root 4096 Mar 13 20:48 ./  
drwxr-xr-x 4 root root 4096 Mar 13 20:45 …/  
-rw-r–r-- 1 root root 899 Mar 13 20:48 certificate.crt  
-rw-r–r-- 1 root root 530 Mar 13 20:48 csr.pem  
-rw-r–r-- 1 root root 302 Mar 13 20:45 privatekey.key

This certificate is used for both HTTPS and HTTP2.

P.S.: I saw multiple tutorials where nginx plays a role as a simple  
forward  
proxy for HTTP and HTTPS, will it work for HTTP/2? Any Idea?

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265389#msg-265389)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 16, 2016, 12:12pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/13 "2016-03-16T12:12:28Z")

</div>

Oh yeah small addition because I use only IP’s I can not test Self  
signed  
certificate most of the SSL checking tools online.

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265390#msg-265390)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 16, 2016, 1:24pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/14 "2016-03-16T13:24:54Z")

</div>

## Roswebnet Wrote:

> On US15.10 I have nginx:
> 
> root@LIA-RP-VS-WEB:/etc/nginx/tls# nginx -V  
> nginx version: nginx/1.9.12  
> built by gcc 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2)

> built with OpenSSL 1.0.2d 9 Jul 2015  
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

You need g, not d.

Posted at Nginx Forum:  
[https://forum.nginx.org/read.php?2,265326,265392#msg-265392](https://forum.nginx.org/read.php?2,265326,265392#msg-265392)

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 16, 2016, 7:01am UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/15 "2016-03-16T07:01:07Z")

</div>

On 03/16/2016 06:33 AM, Roswebnet wrote:

> built on: reproducible build, date unspecified  
> OPENSSLDIR: “/usr/lib/ssl”  
> In addition, the LIA-RP-VS-WEB is a XEN guest.  
> → proxy = “DIRECT”  
> nginx mailing list  
> [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
> [mailman.nginx.org archive](http://mailman.nginx.org/mailman/listinfo/nginx)

Have you checked the server directly? I don’t have intimate knowledge of  
http2 so rely on Qualys to tell me when I’ve got it set up properly…

> **[SSL Server Test: www.greengecko.co.nz (Powered by Qualys SSL Labs)](https://www.ssllabs.com/ssltest/analyze.html?d=www.greengecko.co.nz&s=101.0.108.116)**

Works fine for me… nginx 1.9.12 + openssl 1.0.2g. ( note g, not d is  
current ). Built from source.

Steve

–  
Steve H. BSc(Hons) MIITP

> **[Linux & Admin Support Services | "Services provided by people who are proud...](https://www.greengecko.co.nz/)**
>
> Offers linux support services, systems and database administration, consultancy and the full development lifecycle for open source - based solutions

Linkedin: [Steve Holdoway - Robotron New Zealand Limited | LinkedIn](http://www.linkedin.com/in/steveholdoway)  
Skype: sholdowa

---

<div class="post-metadata">

**Author:** ![Roswebnet](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/77aa72/32.png) [@Roswebnet](https://www.ruby-forum.com/u/Roswebnet)\
**Post date:** [March 16, 2016, 1:30pm UTC](https://www.ruby-forum.com/t/http-2-and-https/244280/16 "2016-03-16T13:30:45Z")

</div>

Ok thank you for pointing out. This version of nginx I got from NGINX  
repository.  
[http://nginx.org/en/linux\_packages.html#mainline](http://nginx.org/en/linux_packages.html#mainline)

deb [Index of /packages/mainline/ubuntu/](http://nginx.org/packages/mainline/ubuntu/) wily nginx  
deb-src [Index of /packages/mainline/ubuntu/](http://nginx.org/packages/mainline/ubuntu/) wily nginx

It means that it was built with older version of openssl. Am I right?  
Therefore, I need to compile nginx by myself…

Posted at Nginx Forum:

> **[Re: HTTP/2 and HTTPS](https://forum.nginx.org/read.php?2,265326,265393#msg-265393)**
>
> Hi everyone, I have strange issue with nginx 1.9.12. I have 3 IP addresses as a server name that are alias IPs on a single Ubuntu server 15.10. Each servername related to specific protocol: http: server { listen 80; server\_name