Haroon Ahmed hahmed

HTTP/3 (QUIC) in local development: the certificate-root problem

Getting HTTP/3 to work on localhost is not the same as getting HTTPS to work on localhost. A cert that gives you a green padlock over TCP can still leave the browser silently refusing to ever speak HTTP/3 to the same origin. This writes up why, how to diagnose it, and what actually fixes it.

It's browser-agnostic in principle but the sharp edges below are Chromium's (Chrome/Edge/Brave); other browsers differ, so test them separately.

Cloning into '/Users/haroon/projects/rails'... remote: Enumerating objects: 128, done.
remote: Counting objects: 0% (1/128)
remote: Counting objects: 1% (2/128)
remote: Counting objects: 2% (3/128)
remote: Counting objects: 3% (4/128)
remote: Counting objects: 4% (6/128)
remote: Counting objects: 5% (7/128)
remote: Counting objects: 6% (8/128)
remote: Counting objects: 7% (9/128)

	# SORBET_RUNTIME_DEFAULT_CHECKED_LEVEL=never RUBY_YJIT_ENABLE=1 ruby structs_test.rb
	# SORBET_RUNTIME_DEFAULT_CHECKED_LEVEL=never ruby structs_test.rb
	# SORBET_RUNTIME_DEFAULT_CHECKED_LEVEL=always ruby structs_test.rb

	require "bundler/inline"

	gemfile(true) do
	source "https://rubygems.org"

	git_source(:github) { \|repo\| "https://github.com/#{repo}.git" }

	initializer 'myveryfirstinitializer.rb', <<-CODE
	Rails.application.configure do
	console do
	require "pry"
	config.console = Pry

	require "awesomecompany"
	end
	end
	CODE

	ruby master % ./configure --enable-yjit --prefix=$HOME/.rubies/ruby-yjit --disable-install-doc
	make -j install
	checking for ruby... /Users/haroon/.rubies/ruby-2.6.5/bin/ruby
	tool/config.guess already exists
	tool/config.sub already exists
	checking build system type... x86_64-apple-darwin21.6.0
	checking host system type... x86_64-apple-darwin21.6.0
	checking target system type... x86_64-apple-darwin21.6.0
	checking for cl.exe... no
	checking for clang... clang

	ruby '2.7.1'

	gem 'rails', github: 'rails/rails'
	gem 'tzinfo-data', '>= 1.2016.7' # Don't rely on OSX/Linux timezone data

	# Action Text
	gem 'actiontext', github: 'basecamp/actiontext', ref: 'okra'
	gem 'okra', github: 'basecamp/okra'

	# Drivers

	# Ruby CircleCI 2.0 configuration file
	#
	# Check https://circleci.com/docs/2.0/language-ruby/ for more details
	#
	version: 2
	jobs:
	build:
	docker:
	# specify the version you desire here
	- image: circleci/ruby:2.4.1-node-browsers