Work around a known issue in OpenSSL (https://github.com/openssl/openssl/issues/188) that does not permit the TLS handshake to be failed if the ALPN negotiation fails.
tomcat/trunk/java/org/apache/coyote/AbstractProtocol.java
tomcat/trunk/webapps/docs/changelog.xml