Доброго времени суток!
Стоит задача настроить HTTP2 и HTTPS на сервере NGINX.
HTTPS настроен и работает, а вот с HTTP2 возникли трудности, он попросту не работает.
Ubuntu 1404
Nginx 1.10.0
Настройки nginx
server {
listen 80;
server_name www.mysite.com mysite.com;
rewrite ^ https://mysite.com$request_uri? permanent;
}
server {
listen 443 ssl http2;
server_name www.mysitecom mysite.com;
ssl on;
ssl_certificate /home/developer/conf/web/ssl.developer.dev.pem;
ssl_certificate_key /home/developer/conf/web/ssl.developer.dev.key;
ssl_dhparam /home/developer/conf/web/dhparam.pem;
ssl_prefer_server_ciphers On;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_session_timeout 1h;
ssl_session_cache shared:SSL:10m;
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.4.4 8.8.8.8 valid=300s;
resolver_timeout 10s;
add_header Strict-Transport-Security max-age=31536000;
access_log /var/log/nginx/nginx.vhost.access.log;
error_log /var/log/apache2/domains/developer.dev.error.log error;
location / {
root /home/developer/web/developer.dev/public_html;
}
location /error/ {
alias /home/developer/web/developer.dev/document_errors/;
}
location @fallback {
proxy_pass http://172.31.1.100:8080;
}
location ~ /\.ht {return 404;}
location ~ /\.svn/ {return 404;}
location ~ /\.git/ {return 404;}
location ~ /\.hg/ {return 404;}
location ~ /\.bzr/ {return 404;}
include /home/developer/conf/web/nginx.developer.dev.conf*;
}
Заранее спасибо за помощь!
