From d78b3349645423e0f350976f7d1e91adf9101810 Mon Sep 17 00:00:00 2001 From: Kyle Carberry Date: Mon, 27 Mar 2023 15:45:42 -0500 Subject: [PATCH] cmd/derper: disable http2 DERP doesn't support HTTP/2. If an HTTP/2 proxy was placed in front of a DERP server requests would fail because the connection would be initialized with HTTP/2, which the DERP client doesn't support. Signed-off-by: Kyle Carberry --- cmd/derper/cert.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/derper/cert.go b/cmd/derper/cert.go index 1fab755a0..db84aa515 100644 --- a/cmd/derper/cert.go +++ b/cmd/derper/cert.go @@ -81,7 +81,7 @@ func (m *manualCertManager) TLSConfig() *tls.Config { return &tls.Config{ Certificates: nil, NextProtos: []string{ - "h2", "http/1.1", // enable HTTP/2 + "http/1.1", }, GetCertificate: m.getCertificate, }