If you&#x27;re stuck on a OpenSSL version without ALPN, and don&#x27;t want to deal with upgrading OpenSSL (or rather statically linking your web server to a newer release), consider using caddy[1]. It&#x27;s a HTTP&#x2F;2 web server written in Go, which comes with its own TLS library (crypto&#x2F;tls) and thus doesn&#x27;t have any dependency on OpenSSL. It even supports automatic deployment of a publicly-trusted certificate through Let&#x27;s Encrypt.<p>[1]: <a href="https:&#x2F;&#x2F;caddyserver.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;caddyserver.com&#x2F;</a>