在Debian 8上使用apache2启用http2

Question

here's the thing I've enabled mod_http2 ( apachectl -M shows : http2_module ) and set this within this vhost

<VirtualHost *:443>
  ServerName s74.fr
  Protocols h2 h2c http/1.1
  H2Direct on
  H2EarlyHints on

Thing is when I run this curl command : I see ALPN offering h2 at the top

But while using a browset or simple website validator, HTTP2 is never used at all ..

Do you guys have any clue on this topic ?

Any remarks, notes, clue, enlightment would be greatly appreciated ;)

curl -v --http2 https://s74.fr

* Connected to s74.fr (91.121.146.195) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: C:\prog\ca-bundle.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
} [5 bytes data] ...

* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ***ALPN, server accepted to use http/1.1***
* Server certificate:
*  subject: CN=s74.fr
*  start date: Oct 10 08:02:34 2018 GMT
*  expire date: Jan  8 08:02:34 2019 GMT
*  subjectAltName: host "s74.fr" matched cert's "s74.fr"
*  issuer: C=US; O=Let's Encrypt; CN=Let's Encrypt Authority X3
*  SSL certificate verify ok.
} [5 bytes data]
> GET / HTTP/1.1
> Host: s74.fr
> User-Agent: curl/7.53.1
> Accept: */*
>
{ [5 bytes data]
< HTTP/1.1 200 OK
< Date: Fri, 19 Oct 2018 06:32:01 GMT
< Server: Apache/2.4.34 (Debian)
< Upgrade: h2,h2c
< Connection: Upgrade
< Etag: 1539924168
< Last-Modified: Fri, 19 Oct 2018 04:42:48 GMT
< Cache-Control: private
< Vary: Accept-Encoding
< Transfer-Encoding: chunked
< Content-Type: text/html; charset=utf-8

Answer 1

If you are using mod_prefork then Apache will show an error in the logs on restart.

Can you add the following to your main apache config file:

<IfModule http2_module>
    #Enable HTTP/2 support
    Protocols h2 http/1.1
    LogLevel http2:info
</IfModule>

Then restart. Then provide check the start of the error log to see if it says anything.

It would also be worth running httpd -V (or apachectl -V ) to see what the environment is configured for.

Answer 2

Taken from https://http2.pro/doc/Apache

Ubuntu / Debain Apache web server distributed in default software repositories of Ubuntu and Debian do not include mod_http2 needed to enable HTTP/2 functionality. You will need to add a third-party package source with latest Apache version that also inludes mod_http2.

apt-get install software-properties-common python-software-properties
add-apt-repository ppa:ondrej/apache2
apt-get update

This will install some utilities (if not installed already) that help us add external PPAs. Secondly, we add the ondrej/apache2 PPA which contains the latest Apache2 builds. Third, we update your systems package information.

apt-get install apache2
apachectl -v

This is to upgrade your existing Apache2 version to the latest version. After upgrading, the apachectl -v command will reveal your upgraded Apache version. This will be 2.4.29 or later.

Add HTTP/2 Support

We highly recommend you enable HTTPS support for your web site first. Most web browser simply do not support HTTP/2 over plain text. Besides, there are no excuses to not use HTTPS anymore. HTTP/2 can be enabled site-by-site basis. Locate your web site's Apache virtual host configuration file, and add the following right after the opening tag: Protocols h2 http/1.1

Overall, your configuration file should look something like this:

<VirtualHost *:443>
  Protocols h2 http/1.1
  ServerAdmin you@your-awesome-site.com
  ServerName your-awesome-site.com
  ...
</VirtualHost>

After the changes, don't forget to reload/restart Apache.

apachectl restart

Also, next chance you can get, I'd recommend updating to debian 9.

Answer 3

多亏了Barry Pollard的评论-在工作人员MPM方面，我已经意识到我的服务器正在运行MPM_prefork，在后来的谷歌搜索中，我已经意识到我的设置尚未完成..因此，我安装并配置了php7.2-fpm禁用了modphp，禁用了mpm_prefork，然后启用了mpm_worker，它立即工作，并且以某种方式提供了对在https模式下获取正确标题以触发304响应的支持