Brian, On 12/13/24 3:38 PM, Paquin, Brian wrote:
I am using Tomcat 10.1.30 with Tomcat Native and get these errors when user’s connect to an application: WARNING [https-openssl-nio-9443-exec-27] org.apache.coyote.http2.Http2Parser.readSettingsFrame Connection [424], An unknown setting with identifier [8] and value [1] was ignored
>
I suspect I need to make a change in my server.xml but I am not sure what needs to be changed.
I don't think you need to change anything. The warning indicates that the client is sending something the server doesn't understand at all.
Here is what I have for connectors (I can share more of server.xml if required): <Connector port="9443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="500" SSLEnabled="true" scheme="https" secure="true" xpoweredBy="false" allowTrace="false"> <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" /> <SSLHostConfig protocols="TLSv1.2"> <Certificate certificateKeyFile="conf/privatekey.key" certificateFile="conf/certificate.crt" certificateChainFile="conf/chain.crt" type="RSA" /> </SSLHostConfig> </Connector> <Connector port="9009" protocol="AJP/1.3" redirectPort="9443" secretRequired="false" /> Are there changes needed in the UpgradeProtocol I am missing?
I don't know enough about the protocol and the source of that warning message to know what "identifier [8]" refers to. My guess is that it is a SETTINGS frame type, only 0 - 6 have been defined, meaning that #8 is undefined.
https://datatracker.ietf.org/doc/html/rfc7540#section-6.5.2 https://httpwg.org/specs/rfc7540.html#rfc.section.6.5.2 What h2 client is being used by these users? -chris --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org