Quic on ubuntu precompiled

General Discussion
, ,
1

After getting my configuration in Http3 with stream proxies? fixed I tested whether browsers actually use http3, and figured out, they don´t.

Looking for the reason I suspect the version I am using - nginx 1.29.8 - doesn´t yet support quic.

nginx -V reports:

nginx version: nginx/1.29.8
built by gcc 13.3.0 (Ubuntu 13.3.0-6ubuntu2~24.04.1)
built with OpenSSL 3.0.13 30 Jan 2024
TLS SNI support enabled
…

whereas the openssl documentation indicates, quic server is supported with 3.5+ only.

I am wondering why nginx doesn´t warn about configuration is OK but doesn´t work somewhere.

With ubuntu 26.04 available within the next weeksand expected to use openssl 3.5+ (3.5 is included in 25.10) - is nginx planning to support Ubuntu 26.04 soon after availability?

2

From the docs

The ngx_http_v3_module module (1.25.0) provides experimental support for HTTP/3.

This module is not built by default, it should be enabled with the --with-http_v3_module configuration parameter.

This module requires the OpenSSL library version 1.1.1 or higher.

So if nginx -V shows --with-http_v3_module you should have basic QUIC support.

OpenSSL 3.5.1+ is required for 0-RTT support.

3

it does show --with-http_v3_module. I am using nginx from nginx repo.

I don´t care whether it has basic QUIC support. It doesn´t work with any browser I tried.

This module requires the OpenSSL library version 1.1.1 or higher.

This is not consistent with the information by OpenSSL:

OpenSSL 3.2 and later features support for the QUIC transport protocol. Currently, only client connectivity is supported (https://docs.openssl.org/3.4/man7/openssl-quic/)

OpenSSL 3.2 and later features support for the QUIC transport protocol. You can use OpenSSL’s QUIC capabilities for both client and server applications. (openssl-quic - OpenSSL Documentation)

I don´t have any reason not to trust OpenSSL, do you?

4

I retested today, and it is still not working. nginx -V reports

nginx version: nginx/1.31.2

built by gcc 15.2.0 (Ubuntu 15.2.0-16ubuntu1) built with OpenSSL 3.5.5 27 Jan 2026 TLS SNI support enabled… and of course --with-http_v3_module …

I used

> docker run -ti --rm alpine/curl-http3 curl --http3 -sI www.example.com

and it reports http2 only.

openssl s_client -quic -alpn h3 -showcerts -servername www.example.com -connect ip:443 most of the time fails, in one instance it showed a cert not requested via sni.