[Pkg-openssl-devel] ALPN for HTTP/2 in jessie(-backports)?

Aron Xu aron at debian.org
Sun Jul 3 14:33:06 UTC 2016


On Sun, Jul 3, 2016 at 10:30 PM, Kurt Roeckx <kurt at roeckx.be> wrote:
> On Sun, Jul 03, 2016 at 09:49:26PM +0800, Aron Xu wrote:
>> On Sun, Jul 3, 2016 at 6:42 PM, Kurt Roeckx <kurt at roeckx.be> wrote:
>> > On Sun, Jul 03, 2016 at 05:37:58PM +0800, Aron Xu wrote:
>> >> Hi,
>> >>
>> >> Google has pushed Chrome 51 which disables NPN, breaking many of the HTTP/2
>> >> services because the least version of supporting ALPN is openssl 1.0.2
>> >> (1.0.1k in jessie-security).
>> >>
>> >> In jessie-backports we have things like nginx in backports that I believe
>> >> having quite some users, what should we do? Should 1.0.2 be pushed to
>> >> -security?
>> >
>> > I've prepared an upload of 1.0.2 for jessie-backports, I will
>> > probably upload it later today.
>> >
>> >
>>
>>
>> Thanks. What's the plan for 2017 - when 1.0.1 upstream EOL?
>
> I intend to support 1.0.1 in Debian for as long as Debian supports
> it, including any LTS.
>


I see, thank you!

Aron



More information about the Pkg-openssl-devel mailing list