ERR_SPDY_PROTOCOL_ERROR Nginx !!

classic Classic list List threaded Threaded
27 messages Options
12
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

It was working well back in days but there's sudden error which is preventing our users to play videos in browser. The error is :



We're unable to find any errors in nginx logs.

Here is the Nginx Version :

[root@cw008 /tunefiles/files]# nginx -V
nginx version: nginx/1.10.1
built with OpenSSL 1.0.2j  26 Sep 2016
TLS SNI support enabled
configure arguments: --prefix=/usr/local/etc/nginx --with-cc-opt='-I /usr/local/include' --with-ld-opt='-L /usr/local/lib' --conf-path=/usr/local/etc/nginx/nginx.conf --sbin-path=/usr/local/sbin/nginx --pid-path=/var/run/nginx.pid --error-log-path=/var/log/nginx/error.log --user=www --group=www --modules-path=/usr/local/libexec/nginx --with-file-aio --with-ipv6 --http-client-body-temp-path=/var/tmp/nginx/client_body_temp --http-fastcgi-temp-path=/var/tmp/nginx/fastcgi_temp --http-proxy-temp-path=/var/tmp/nginx/proxy_temp --http-scgi-temp-path=/var/tmp/nginx/scgi_temp --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi_temp --http-log-path=/var/log/nginx/access.log --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gzip_static_module --with-http_gunzip_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_stub_status_module --with-http_sub_module --with-pcre --with-http_v2_module --with-stream=dynamic --with-stream_ssl_module --with-threads --with-mail=dynamic --without-mail_imap_module --without-mail_pop3_module --without-mail_smtp_module --with-mail_ssl_module --with-http_ssl_module

======================================================

Please guide me on how should i diagnose this error ?

Thanks.
Shahzaib

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Francis Daly
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Etienne Robillard

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

This error is mostly coming on google chrome. :(

Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

spectre inc
Are you useing ssl?

On Tue, Aug 1, 2017 at 4:31 PM shahzaib mushtaq <[hidden email]> wrote:
Hi,

This error is mostly coming on google chrome. :(


Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

spectre inc
In reply to this post by shahzaib mushtaq
I had the same problem when seeing a site with https is that's the case then it has to do with the ssl and there is work around let me know and I'll tell you what to fix 

Sent from my iPhone

On Aug 1, 2017, at 2:30 PM, shahzaib mushtaq <[hidden email]> wrote:

Hi,

This error is mostly coming on google chrome. :(

Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

What fix do you suggest ?

Shahzaib

Virus-free. www.avast.com

On Wed, Aug 2, 2017 at 2:15 AM, spectre inc <[hidden email]> wrote:
I had the same problem when seeing a site with https is that's the case then it has to do with the ssl and there is work around let me know and I'll tell you what to fix 

Sent from my iPhone

On Aug 1, 2017, at 2:30 PM, shahzaib mushtaq <[hidden email]> wrote:

Hi,

This error is mostly coming on google chrome. :(

Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

spectre inc
The current workaround is to change the SSL Cipher Suite
On Tue, Aug 1, 2017 at 5:37 PM shahzaib mushtaq <[hidden email]> wrote:
Hi,

What fix do you suggest ?

Shahzaib

Virus-free. www.avast.com

On Wed, Aug 2, 2017 at 2:15 AM, spectre inc <[hidden email]> wrote:
I had the same problem when seeing a site with https is that's the case then it has to do with the ssl and there is work around let me know and I'll tell you what to fix 

Sent from my iPhone

On Aug 1, 2017, at 2:30 PM, shahzaib mushtaq <[hidden email]> wrote:

Hi,

This error is mostly coming on google chrome. :(

Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

Following ciphers i am using :

server {
        listen  443 http2;
        ssl on;
          ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
          ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';       ssl_prefer_server_ciphers on;

===========

What do you think should i change it to ?

Thanks
Shahzaib

On Wed, Aug 2, 2017 at 2:40 AM, spectre inc <[hidden email]> wrote:
The current workaround is to change the SSL Cipher Suite

On Tue, Aug 1, 2017 at 5:37 PM shahzaib mushtaq <[hidden email]> wrote:
Hi,

What fix do you suggest ?

Shahzaib

Virus-free. www.avast.com

On Wed, Aug 2, 2017 at 2:15 AM, spectre inc <[hidden email]> wrote:
I had the same problem when seeing a site with https is that's the case then it has to do with the ssl and there is work around let me know and I'll tell you what to fix 

Sent from my iPhone

On Aug 1, 2017, at 2:30 PM, shahzaib mushtaq <[hidden email]> wrote:

Hi,

This error is mostly coming on google chrome. :(

Shahzaib

On Tue, Aug 1, 2017 at 8:51 PM, Etienne Robillard <[hidden email]> wrote:

Hi,

i think mozilla don't even support SPDY protocol anymore. The replacement is HTTP2.

Best regards,

E


Le 2017-08-01 à 09:50, shahzaib mushtaq a écrit :
Hi,

Thanks for the answer, the browser is google chrome. Googling not helping much we've tried various solutions but all in vain. :-(


Also the OS is FreeBSD.

Regards.
Shahzaib

On Tue, Aug 1, 2017 at 5:39 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 01:47:36PM +0500, shahzaib mushtaq wrote:

Hi there,

> It was working well back in days but there's sudden error which is
> preventing our users to play videos in browser. The error is :
>
> GET
> https://domain.com/files/videos/2017/08/01/15015680292fcdf-360.mp4?h=vOilKo_cOUft5fViRqIcMg&ttl=1501588832
> net::ERR_SPDY_PROTOCOL_ERROR
>
>
> We're unable to find any errors in nginx logs.

If the error message came from something not-nginx, possibly web-searching
for it in the context of that other thing will give a hint as to the
reason?

Which browser shows the error message, and did that browser change
anything recently?

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

-- 
Etienne Robillard
[hidden email]
http://www.isotopesoftware.ca/

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Rainer Duffner

Am 01.08.2017 um 23:51 schrieb shahzaib mushtaq <[hidden email]>:

What do you think should i change it to ?



What does SSL-Labs say to it?

Or htbridge?



Rainer

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Matthias Fechner
In reply to this post by shahzaib mushtaq
Am 01.08.2017 um 23:51 schrieb shahzaib mushtaq:

> Following ciphers i am using :
>
> server {
>         listen  443 http2;
>         ssl on;
>           ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
>           ssl_ciphers
> 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';
>       ssl_prefer_server_ciphers on;
>
> ===========
>
> What do you think should i change it to ?

have you tried to using this generator:
https://mozilla.github.io/server-side-tls/ssl-config-generator/

A very helpful tool.

Gruß
Matthias

--

"Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning." --
Rich Cook

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Francis Daly
In reply to this post by shahzaib mushtaq
On Tue, Aug 01, 2017 at 06:50:39PM +0500, shahzaib mushtaq wrote:

Hi there,

> Thanks for the answer, the browser is google chrome. Googling not helping
> much we've tried various solutions but all in vain. :-(

That's not much to go on.

There is more than one version of google chrome. Some web reports suggest
that SPDY support was going to be removed in version 51.

Some web reports suggest client-side changes that can avoid that error
message, including one particular malware-protection system leading to
it appearing.

You don't say which "various solutions" you have tried, so there's no
point me linking to the same web pages that you can find -- perhaps
you've already seen them and done what they suggest.


What you seem to be reporting is that things were working fine with your
nginx and some clients; and then without changing nginx, some clients
started failing.

On that basis, if you are looking for how to diagnose the problem,
I'd start by looking at the clients and seeing what changed on their side.

There may well be a problem with your nginx setup; or there may well
be something that you can change on your nginx side to unbreak whatever
client changes happened; but from what you have written so far, I see
no evidence of that.

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi Franic,

Thanks for response well i've tried lot more things, updated FreeBsd, updated openssl but issue is still there. Do you think is there any possibility it is linked with Nginx ? Here is my Nginx SSL config :


>>There is more than one version of google chrome. Some web reports suggest
that SPDY support was going to be removed in version 51.

Chrome version is 64 latest which has removed spdy and supports HTTP2 i guess.

>>On that basis, if you are looking for how to diagnose the problem,
I'd start by looking at the clients and seeing what changed on their side.

We are also getting spdy error, we create an html page and put 6 direct video links on the page like following :

https://pastebin.com/dzpwg26C

After that we open this link in Incognito chrome and in Inspect element under Console those SPDY protocol errors start to occur. Here see the screenshot : http://prntscr.com/g3bqcg

Regards.
Shahzaib


On Wed, Aug 2, 2017 at 12:13 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 06:50:39PM +0500, shahzaib mushtaq wrote:

Hi there,

> Thanks for the answer, the browser is google chrome. Googling not helping
> much we've tried various solutions but all in vain. :-(

That's not much to go on.

There is more than one version of google chrome. Some web reports suggest
that SPDY support was going to be removed in version 51.

Some web reports suggest client-side changes that can avoid that error
message, including one particular malware-protection system leading to
it appearing.

You don't say which "various solutions" you have tried, so there's no
point me linking to the same web pages that you can find -- perhaps
you've already seen them and done what they suggest.


What you seem to be reporting is that things were working fine with your
nginx and some clients; and then without changing nginx, some clients
started failing.

On that basis, if you are looking for how to diagnose the problem,
I'd start by looking at the clients and seeing what changed on their side.

There may well be a problem with your nginx setup; or there may well
be something that you can change on your nginx side to unbreak whatever
client changes happened; but from what you have written so far, I see
no evidence of that.

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

The latest update:

We tested videos on Debian and everything worked smooth, the issue looks to be on FreeBSD. No idea what is it related to though. 

Any guidance will be very much appreciated. :(

Shahzaib

On Wed, Aug 2, 2017 at 1:17 PM, shahzaib mushtaq <[hidden email]> wrote:
Hi Franic,

Thanks for response well i've tried lot more things, updated FreeBsd, updated openssl but issue is still there. Do you think is there any possibility it is linked with Nginx ? Here is my Nginx SSL config :


>>There is more than one version of google chrome. Some web reports suggest
that SPDY support was going to be removed in version 51.

Chrome version is 64 latest which has removed spdy and supports HTTP2 i guess.

>>On that basis, if you are looking for how to diagnose the problem,
I'd start by looking at the clients and seeing what changed on their side.

We are also getting spdy error, we create an html page and put 6 direct video links on the page like following :

https://pastebin.com/dzpwg26C

After that we open this link in Incognito chrome and in Inspect element under Console those SPDY protocol errors start to occur. Here see the screenshot : http://prntscr.com/g3bqcg

Regards.
Shahzaib


On Wed, Aug 2, 2017 at 12:13 PM, Francis Daly <[hidden email]> wrote:
On Tue, Aug 01, 2017 at 06:50:39PM +0500, shahzaib mushtaq wrote:

Hi there,

> Thanks for the answer, the browser is google chrome. Googling not helping
> much we've tried various solutions but all in vain. :-(

That's not much to go on.

There is more than one version of google chrome. Some web reports suggest
that SPDY support was going to be removed in version 51.

Some web reports suggest client-side changes that can avoid that error
message, including one particular malware-protection system leading to
it appearing.

You don't say which "various solutions" you have tried, so there's no
point me linking to the same web pages that you can find -- perhaps
you've already seen them and done what they suggest.


What you seem to be reporting is that things were working fine with your
nginx and some clients; and then without changing nginx, some clients
started failing.

On that basis, if you are looking for how to diagnose the problem,
I'd start by looking at the clients and seeing what changed on their side.

There may well be a problem with your nginx setup; or there may well
be something that you can change on your nginx side to unbreak whatever
client changes happened; but from what you have written so far, I see
no evidence of that.

Good luck with it,

        f
--
Francis Daly        [hidden email]
_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

blason
In reply to this post by shahzaib mushtaq
Hello!

This issue often happens when a cipher is missing in your cipher list and
Chrome tries to use another cipher forbidden in the HTTP/2 spec. Using SSL
Labs would normally display such error (in the "Handshake Simulation" part
of thei results).

And yes, Chrome sucks for displaying an error related to SPDY, even when you
don't have any SPDY and are using HTTP/2.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275776,275816#msg-275816

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
Hi,

What could be the exact cipher missing in this case ? Here is the cipher list i am using , also there's nothing i found of error in ssl labs instead for two ciphers which it said as WEAK while ssllabs gave A grade.

        ssl_ciphers 
'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';  



On Wed, Aug 2, 2017 at 6:53 PM, Alt <[hidden email]> wrote:
Hello!

This issue often happens when a cipher is missing in your cipher list and
Chrome tries to use another cipher forbidden in the HTTP/2 spec. Using SSL
Labs would normally display such error (in the "Handshake Simulation" part
of thei results).

And yes, Chrome sucks for displaying an error related to SPDY, even when you
don't have any SPDY and are using HTTP/2.

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,275776,275816#msg-275816

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

AW: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Lukas Tribus
In reply to this post by blason
Hello!


> This issue often happens when a cipher is missing in your cipher list and
> Chrome tries to use another cipher forbidden in the HTTP/2 spec.

Wrong. In that case, Chrome would return:
ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY

which is different than ERR_SPDY_PROTOCOL_ERROR.


Also note that all those error codes are valid for HTTP2 as well, its just
that their name hasn't been updated in Chrome yet.


I'd suggest to upgrade to a supported nginx release without any
third-party modules first of all, also try without mp4 streaming
code paths.

Try to reproduce it in an isolated environment, then you can
debug on the client site and on the nginx side.



Lukas


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

shahzaib mushtaq
The only fix that worked is disabling the HTTP2 on Nginx for chrome. No idea what the actual problem is.

On Wed, Aug 2, 2017 at 8:11 PM, Lukas Tribus <[hidden email]> wrote:
Hello!


> This issue often happens when a cipher is missing in your cipher list and
> Chrome tries to use another cipher forbidden in the HTTP/2 spec.

Wrong. In that case, Chrome would return:
ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY

which is different than ERR_SPDY_PROTOCOL_ERROR.


Also note that all those error codes are valid for HTTP2 as well, its just
that their name hasn't been updated in Chrome yet.


I'd suggest to upgrade to a supported nginx release without any
third-party modules first of all, also try without mp4 streaming
code paths.

Try to reproduce it in an isolated environment, then you can
debug on the client site and on the nginx side.



Lukas


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx


_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: ERR_SPDY_PROTOCOL_ERROR Nginx !!

Valentin V. Bartenev-3
On Wednesday 02 August 2017 21:43:19 shahzaib mushtaq wrote:
> The only fix that worked is disabling the HTTP2 on Nginx for chrome. No
> idea what the actual problem is.
>
[..]

There are a lot of problems has been fixed since 1.10.
As already suggested, you should update nginx to a supported version.

  wbr, Valentin V. Bartenev

_______________________________________________
nginx mailing list
[hidden email]
http://mailman.nginx.org/mailman/listinfo/nginx
12
Loading...