HTTP2 site does not loads on firefox

2016-06-21 Thread Rajnesh Kumar Siwal
Hi, We have recently deployed a site on http2 (with ALPN support) using nginx. The site does not open in Firefox 47. The site supports following ciphers : *Protocols* TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes SSL 3 No SSL 2 No *Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and SSL

Re: SSL handshake failed with mutual TLS

2016-06-21 Thread steve
On 06/21/2016 03:59 AM, CJ Ess wrote: Check that you have both the certificate and any intermediate certificates in your pem file - you can skip the top-most CA certificates as those are generally included in your browser's CA store - but the intermediates are not. I believe Nginx wants cer

Re: nginx core dump explodes

2016-06-21 Thread martinproinity
The dump was 550GB large. So I guess the only explanation for this are the accumulated keys_zone sizes. There are no third-party modules. We only see the leaks for specific HTTP/2 traffic at every reload. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,267669,267748#msg-267748 ___

Segmentation fault with default init.d

2016-06-21 Thread J B
I installed nginx-extras and passenger from Phusion PPA and received the following error. /etc/init.d/nginx: line 46: 32069 Segmentation fault (core dumped) start-stop-daemon --start --quiet --pidfile $PID --exec $DAEMON -- $DAEMON_OPTS 2> /dev/null What's the best way to begin troubleshoot

Re: nginx core dump explodes

2016-06-21 Thread Maxim Dounin
Hello! On Tue, Jun 21, 2016 at 02:53:48AM -0400, martinproinity wrote: > Thanks, setting the value to 600G made it possible to get a dump. But it > took ages and the system became quite unstable. > > What can cause the dump to become that large? There is almost no traffic > (<10Mbps) on this ser