You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[warning] Transport option {:next_protocols_advertised, ["h2", "http/1.1"]} unknown or invalid. #111
Maybe there are some backwards compatibility issues that are problematic, but otherwise I think it'd be great to simply remove the setting of :next_protocols_advertised. If that's not possible maybe we could create a way to explicitly unset :next_protocols_advertised, similar to the code below?
I was a bit off in my troubleshooting at first. It wasn't the OTP ssl library that was emitting the warning but rather the ranch library.
This warning started being issued in ranch 2.1, which was released on 2021-09-09. It's mentioned here in their upgrade notes. Apparently I too had been running an outdated ranch (1.8) for quite a while until recently.
Chrome even dropped support for NPN (next_protocols_advertised) already back in 2016-04, so it feels like it should be pretty safe to outright stop setting next_protocols_advertised, just like you suggested.
Activity
SamHutchings commentedon Feb 2, 2026
This also appears to be causing issues with plug 1.19.x when using the
cipher_suite: :strongoption, as this now enforced TLS 1.3 only by default.When starting the project you see the below:
Workaroundable by using
compatiblecipher suites, or explicitly allowing TLS 1.2, but it looks like it's stopping the use of TLS 1.3 exclusively.EDIT: This may be due to an outdated
ranchversion (1.8.1).josevalim commentedon Feb 2, 2026
Can someone investigate when the
alpn_preferred_protocolswas introduced in Erlang/OTP, and send a PR so we can stop setting thenext_...one? Thanks.eriknaslund commentedon Feb 4, 2026
I was a bit off in my troubleshooting at first. It wasn't the OTP ssl library that was emitting the warning but rather the ranch library.
This warning started being issued in ranch 2.1, which was released on 2021-09-09. It's mentioned here in their upgrade notes. Apparently I too had been running an outdated ranch (1.8) for quite a while until recently.
Chrome even dropped support for NPN (
next_protocols_advertised) already back in 2016-04, so it feels like it should be pretty safe to outright stop settingnext_protocols_advertised, just like you suggested.I'll send a PR tomorrow.
Remove deprecated :next_protocols_advertised from ranch_ssl socket_op…
eriknaslund commentedon Feb 5, 2026
@josevalim Tiny 2-line PR created. Tests pass and I verified that the warning on startup disappeared.
Remove deprecated :next_protocols_advertised from ranch_ssl socket_op…
adelton commentedon Sep 28, 2026
With #112 merged, should this issue be Closed as resolved?