Enable HTTP2 on Nginx (work)

cloned from Enable HTTP2 on Nginx

By twampd // 8 years ago

Clone

If the version of Nginx is higher than 1.9.5, it enable the HTTP2 protocol for sites with ssl.
comparing version code from Stack Overflow
http://stackoverflow.com/questions/16989598/bash-comparing-version-numbers#24067243

function version_gt() { test "$(echo "$@" | tr " " "\n" | sort -V | head -n 1)" != "$1"; }

if version_gt $(nginx -v 2>&1 | grep -E '[0-9]+\.[0-9]+(\.[0-9]+)?' -o) 1.9.5; then
    for I in `grep -l 'listen 443 ssl;' /etc/nginx/sites-available/*`; do
        sed -i 's/listen 443 ssl;/listen 443 ssl http2;/g' $I
        # compatible with Patch LOGJAM Vulnerability
        sed -i "s/ssl_protocols TLSv1 TLSv1.1 TLSv1.2;/ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\\n    ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';\\n\\n    ssl_session_timeout 5m;\\n    ssl_session_cache shared:SSL:5m;\\n    ssl_prefer_server_ciphers on;/g" $I
    done

service nginx reload
fi

Site maintained by Vince Mitchell.

Inspired by original by David Hemphill, Tanner Hearne, & Matt Stauffer.