You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Thomas Hoffmann (Speed4Trade GmbH)" <Th...@speed4trade.com.INVALID> on 2024/09/13 09:57:56 UTC

net::ERR_HTTP2_PROTOCOL_ERROR errors in version 10.1.29

Hello,
after upgrading from 10.1.25 to 10.1.29 I experience many net::ERR_HTTP2_PROTOCOL_ERROR in Edge and Chrome.
Firefox shows NS_ERROR_NET_RESET.
The website doesn't fully render.

Access-Log shows several HTTP 500 errors for static resources.
The other logfiles don't show any errors.

Does anybody observer the same issues?

My connector looks like:

                <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImplementation"
               maxThreads="150" minSpareThreads="25"
               URIEncoding="UTF-8" useBodyEncodingForURI="false"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
               SSLEnabled="true"
               compression="force">
                <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol"  />
                <SSLHostConfig ciphers="ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
                                disableSessionTickets="true"
                                honorCipherOrder="false"
                                protocols="+TLSv1.2,+TLSv1.3">
                    <Certificate certificateKeyFile="\localhost.key"  certificateFile="localhost.pem"   type="RSA"    />
                </SSLHostConfig>
    </Connector>


Thanks in advance!
Thomas

AW: net::ERR_HTTP2_PROTOCOL_ERROR errors in version 10.1.29

Posted by "Thomas Hoffmann (Speed4Trade GmbH)" <Th...@speed4trade.com.INVALID>.
Hello,
thank you for the quick reply!
I will wait for the next release / fix.

> -----Ursprüngliche Nachricht-----
> Von: Rémy Maucherat <re...@apache.org>
> Gesendet: Freitag, 13. September 2024 12:48
> An: Tomcat Users List <us...@tomcat.apache.org>
> Betreff: Re: net::ERR_HTTP2_PROTOCOL_ERROR errors in version 10.1.29
> 
> On Fri, Sep 13, 2024 at 11:58 AM Thomas Hoffmann (Speed4Trade GmbH)
> <Th...@speed4trade.com.invalid> wrote:
> >
> > Hello,
> > after upgrading from 10.1.25 to 10.1.29 I experience many
> net::ERR_HTTP2_PROTOCOL_ERROR in Edge and Chrome.
> > Firefox shows NS_ERROR_NET_RESET.
> > The website doesn't fully render.
> >
> > Access-Log shows several HTTP 500 errors for static resources.
> > The other logfiles don't show any errors.
> >
> > Does anybody observer the same issues?
> 
> You can use 10.1.28 instead for now, the regression is being worked on.
> 
> Rémy
> 
> > My connector looks like:
> >
> >                 <Connector port="443"
> protocol="org.apache.coyote.http11.Http11NioProtocol"
> >
> sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImple
> mentation"
> >                maxThreads="150" minSpareThreads="25"
> >                URIEncoding="UTF-8" useBodyEncodingForURI="false"
> >                enableLookups="false" disableUploadTimeout="true"
> >                acceptCount="100" scheme="https" secure="true"
> >                SSLEnabled="true"
> >                compression="force">
> >                 <UpgradeProtocol
> className="org.apache.coyote.http2.Http2Protocol"  />
> >                 <SSLHostConfig ciphers="ECDHE-ECDSA-AES128-GCM-
> SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-
> SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-
> POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-
> SHA256:DHE-RSA-AES256-GCM-SHA384"
> >                                 disableSessionTickets="true"
> >                                 honorCipherOrder="false"
> >                                 protocols="+TLSv1.2,+TLSv1.3">
> >                     <Certificate certificateKeyFile="\localhost.key"
> certificateFile="localhost.pem"   type="RSA"    />
> >                 </SSLHostConfig>
> >     </Connector>
> >
> >
> > Thanks in advance!
> > Thomas
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org


Re: net::ERR_HTTP2_PROTOCOL_ERROR errors in version 10.1.29

Posted by Rémy Maucherat <re...@apache.org>.
On Fri, Sep 13, 2024 at 11:58 AM Thomas Hoffmann (Speed4Trade GmbH)
<Th...@speed4trade.com.invalid> wrote:
>
> Hello,
> after upgrading from 10.1.25 to 10.1.29 I experience many net::ERR_HTTP2_PROTOCOL_ERROR in Edge and Chrome.
> Firefox shows NS_ERROR_NET_RESET.
> The website doesn't fully render.
>
> Access-Log shows several HTTP 500 errors for static resources.
> The other logfiles don't show any errors.
>
> Does anybody observer the same issues?

You can use 10.1.28 instead for now, the regression is being worked on.

Rémy

> My connector looks like:
>
>                 <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
>                sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImplementation"
>                maxThreads="150" minSpareThreads="25"
>                URIEncoding="UTF-8" useBodyEncodingForURI="false"
>                enableLookups="false" disableUploadTimeout="true"
>                acceptCount="100" scheme="https" secure="true"
>                SSLEnabled="true"
>                compression="force">
>                 <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol"  />
>                 <SSLHostConfig ciphers="ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
>                                 disableSessionTickets="true"
>                                 honorCipherOrder="false"
>                                 protocols="+TLSv1.2,+TLSv1.3">
>                     <Certificate certificateKeyFile="\localhost.key"  certificateFile="localhost.pem"   type="RSA"    />
>                 </SSLHostConfig>
>     </Connector>
>
>
> Thanks in advance!
> Thomas

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org