Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tls,http2: send fatal alert on ALPN mismatch #44031

Merged
merged 1 commit into from Aug 13, 2022

Commits on Jul 28, 2022

  1. tls,http2: send fatal alert on ALPN mismatch

    To comply with RFC 7301, make TLS servers send a fatal alert during the
    TLS handshake if both the client and the server are configured to use
    ALPN and if the server does not support any of the protocols advertised
    by the client.
    
    This affects HTTP/2 servers. Until now, applications could intercept the
    'unknownProtocol' event when the client either did not advertise any
    protocols or if the list of protocols advertised by the client did not
    include HTTP/2 (or HTTP/1.1 if allowHTTP1 was true). With this change,
    only the first case can be handled, and the 'unknownProtocol' event will
    not be emitted in the second case because the TLS handshake fails and no
    secure connection is established.
    tniessen committed Jul 28, 2022
    Configuration menu
    Copy the full SHA
    21958e4 View commit details
    Browse the repository at this point in the history