# Nginx SPDY: Missing NPN Extension in SSL/TLS Handshake?

**URL:** <https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245>\
**Category:** NGINX\
**Created:** [June 9, 2013, 7:10am UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245 "2013-06-09T07:10:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![alcina](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/a587f6/32.png) [@alcina](https://www.ruby-forum.com/u/alcina)\
**Post date:** [June 9, 2013, 7:10am UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245/1 "2013-06-09T07:10:48Z")

</div>

Hi guys, I’ve tried setting up CentOS 6.4, Nginx 1.4.1 with Google SPDY  
support and used [spdycheck.org](http://spdycheck.org) to check the site and all SPDY checks  
pass  
except this notice:

Missing NPN Extension in SSL/TLS Handshake

Sorry, but this server is not including an NPN Entension during the  
SSL/TLS  
handshake. The NPN Extension is an additional part of the SSL/TLS  
ServerHello message which allows web servers to tell browsers they  
support  
additional protocols, like SPDY. SSL/TLS servers that don’t use send the  
NPN  
Extension cannot use SPDY because they have no way to tell the browser  
to  
use SPDY instead of HTTP.

What exactly am I missing from Nginx 1.4.1, openssl 1.0.1e and SPDY  
setup to  
properly satisfy NPN Extension in SSL/TLS handshake ?

Chrome reports SPDY support fine though.

cheers

Posted at Nginx Forum:

> **[Nginx SPDY: Missing NPN Extension in SSL/TLS Handshake ?](https://forum.nginx.org/read.php?2,239971,239971#msg-239971)**
>
> Hi guys, I've tried setting up CentOS 6.4, Nginx 1.4.1 with Google SPDY support and used spdycheck.org to check the site and all SPDY checks pass except this notice: Missing NPN Extension in SSL/TLS Handshake Sorry, but this server is not including...

---

<div class="post-metadata">

**Author:** ![George](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71e660/32.png) [@George](https://www.ruby-forum.com/u/George)\
**Post date:** [June 9, 2013, 1:53pm UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245/2 "2013-06-09T13:53:50Z")

</div>

Hi,

this doesn’t really make sense; NPN is absolutely required for SPDY.

What does the ssllabs test say in “Next Protocol Negotiation”?

> **[SSL Server Test (Powered by Qualys SSL Labs)](https://www.ssllabs.com/ssltest/index.html)**
>
> A comprehensive free SSL test for your public web servers.

Regards,

Lukas

---

<div class="post-metadata">

**Author:** ![George](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71e660/32.png) [@George](https://www.ruby-forum.com/u/George)\
**Post date:** [June 9, 2013, 2:49pm UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245/3 "2013-06-09T14:49:21Z")

</div>

According to ssllabs for NPN

Next Protocol Negotiation Yes spdy/2 http/1.1

so [spdycheck.org](http://spdycheck.org) incorrect ?

Posted at Nginx Forum:

> **[Re: RE: Nginx SPDY: Missing NPN Extension in SSL/TLS Handshake ?](https://forum.nginx.org/read.php?2,239971,239977#msg-239977)**
>
> Hi guys, I've tried setting up CentOS 6.4, Nginx 1.4.1 with Google SPDY support and used spdycheck.org to check the site and all SPDY checks pass except this notice: Missing NPN Extension in SSL/TLS Handshake Sorry, but this server is not including...

---

<div class="post-metadata">

**Author:** ![George](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71e660/32.png) [@George](https://www.ruby-forum.com/u/George)\
**Post date:** [June 9, 2013, 3:40pm UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245/4 "2013-06-09T15:40:11Z")

</div>

> so [spdycheck.org](http://spdycheck.org) incorrect ?

I guess so. I would suggest to report this to support at zoompf dot com  
so they can fix it (or tell what exactly is wrong).

Regards,

Lukas

---

<div class="post-metadata">

**Author:** ![George](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71e660/32.png) [@George](https://www.ruby-forum.com/u/George)\
**Post date:** [June 10, 2013, 2:42pm UTC](https://www.ruby-forum.com/t/nginx-spdy-missing-npn-extension-in-ssl-tls-handshake/235245/5 "2013-06-10T14:42:18Z")

</div>

Thanks Lukas for your help 🙂

Posted at Nginx Forum:

> **[Re: RE: Nginx SPDY: Missing NPN Extension in SSL/TLS Handshake ?](https://forum.nginx.org/read.php?2,239971,240007#msg-240007)**
>
> Hi guys, I've tried setting up CentOS 6.4, Nginx 1.4.1 with Google SPDY support and used spdycheck.org to check the site and all SPDY checks pass except this notice: Missing NPN Extension in SSL/TLS Handshake Sorry, but this server is not including...
