Build Openresty/Nginx against OpenSSl with QUIC

inevity commented 4 years ago

Build Openresty/Nginx against OpenSSl which have HTTP3 Boringssl API for QUIC using Cloudflare's Quiche impl. Depend:

Akamai openssl patch: [WIP: master QUIC support #8797 https://github.com/openssl/openssl/pull/8797
Quiche patch: WIP tls: add feature to build against OpenSSL https://github.com/cloudflare/quiche/pull/126
Nginx patch: https://github.com/cloudflare/quiche/tree/master/extras/nginx
Update ssl_quic_method to use set_read_secret/set_write_secret.
Impl SSL_CTX_set_early_data_enabled by SSL_CTX_set_max_early_data in quiche code

Details please see QUIC.md

Now have confirmation the 0rrt not working.

xddxdd commented 4 years ago

I applied your patch to Nginx 1.19.0 and got it working with one virtual host (server block), but when 2 or more server blocks are present, HTTP3 stops working on all of the virtual hosts.

inevity commented 4 years ago

I applied your patch to Nginx 1.19.0 and got it working with one virtual host (server block), but when 2 or more server blocks are present, HTTP3 stops working on all of the virtual hosts.

Oh, maybe have time to dig into it.

As for nginx, now it support http3 with boringssl officially. see https://www.nginx.com/blog/introducing-technology-preview-nginx-support-for-quic-http-3/ and https://github.com/openssl/openssl/pull/8797#issuecomment-644521827

inevity / openresty-packaging

Build Openresty/Nginx against OpenSSl with QUIC #1