Feature: Quic Server MVP

[nhorman]

Based on the gap analysis performed by @mattcaswell @levitte and @t8m the following issues are currently required to complete the QUIC server MVP:

Issues

Preview Give feedback

1. Implement QUIC server address validation #715
   3 of 3
   +0
   
2. Review 1 for QUIC Concurrency API implementation #704
   +0
   
3. Review 2 for QUIC Concurrency API implementation #705
   +0
4. Review 1 for QUIC polling mode API #706
   +0
   
5. Review 2 for QUIC polling mode API #707
   +0
   
6. Create an http3 quic server to perform interoperablility testing temp_staging_repo#23
   6 of 6
   +0
7. Establish quic interoperability testing CI #709
   2 of 2
   epic subepic +2
8. https://github.com/openssl/private/issues/536
9. Review QUIC RFC for all MUST/SHOULD items and confirm they are implemented in our MVP #718
   3 of 3
   epic subepic +2
10. Update QUIC server demo to use immediate mode polling #712
    1 of 1
    +0
11. Augment QUIC interop testing to include immediate mode polling support and ensure its testing is covered #713
    +0
12. Investigate the Current validity of the QUIC server integration CID management issue that is currently outstanding #714
    1 of 1
    +0
    
13. ressurect concurrency api PR for QUIC #742
    +0
    
14. 1st review for http3 server #733
    +0
    
15. 2nd review for http3 server #734
    +0
    
16. Review 1 for ressurect concurrency api PR for QUIC #775
    Spike +1
    
17. Review 2 for ressurect concurrency api PR for QUIC #776
    Spike +1
    
18. QUIC when used via s_client fails to populate quic_transport_parameters extension in client hello openssl#25054
    branch: master severity: regression triaged: bug +3
    
19. Review 1 for ressurect concurrency api PR for QUIC #806
    Spike +1
    
20. Review 2 for ressurect concurrency api PR for QUIC #807
    Spike +1
21. Investigate failures in quic interop tests and create issues to fix them #820
    +0
    
22. Rebase QUIC server feature branch #823
    +0
    
23. QUIC Server branch - leaks detected in Fuzz-checker CI openssl#25387
    severity: regression spike triaged: bug +3
24. QUIC: Calling SSL_stream_reset on a stream SSL object that has received all data already segfaults openssl#25410
    0 of 2
    branch: 3.2 branch: 3.3 branch: 3.4 branch: master triaged: bug +5
    
25. Add SSL_dup capability for QUIC SSL objects openssl#25411
    triaged: feature +1
26. SSL_write_ex on stream object sometimes retransmits parts of stream data #924
    +0
    
27. QUIC: To avoid being used for an amplification attack, such endpoints MUST limit the cumulative size of packets it sends to three times the cumulative size of the packets that are received and attributed to the connection. #895
    Spike +1
    
28. QUIC: While otherwise identical to the closing state, an endpoint in the draining state MUST NOT send any packets. #896
    Spike +1
29. QUIC: After the handshake is confirmed (see Section 4.1.2 of [QUIC-TLS]), an endpoint MUST send any CONNECTION_CLOSE frames in a 1-RTT packet. #897
    QUIC Spike +2
    
30. QUIC: Endpoints MUST NOT send a TLS KeyUpdate message. #898
    Spike +1
    
31. QUIC: Endpoints MUST treat the receipt of a TLS KeyUpdate message as a connection error of type 0x010a, equivalent to a fatal TLS alert of unexpected_message; see Section 4.8. #899
    Spike +1
    
32. the client validation: SSL_accept_connection() returns before handshake is done #914
    Spike +1
    
33. implement sending of version negotiation packets from server #921
    QUIC +1
    
34. QUIC SERVER: Testing the http3 demo server with chrome produces unexpected errors openssl#25417
    branch: master spike triaged: bug +3
    
35. quicapitest is periodically failing #930
    QUIC Spike triaged: bug +3
    
36. Write additional fault injection tests for QUIC server #716
    1 of 1
    QUIC epic subepic +3
37. QUIC: To avoid excessively small idle timeout periods, endpoints MUST increase the idle timeout period to be at least three times the current Probe Timeout (PTO). #894
    QUIC Spike +2
38. Investigation: Implement send unblocking on QUIC objects #859
    Spike +1
39. QUIC: Senders MUST either use pacing or limit such bursts. #900
    Spike +1
40. port_default_packet_handler() needs to know when it should start with client validation #911
    +0
41. SSL_new_from_listener always returns NULL openssl#25851
    QUIC spike triaged: feature triaged: question +4
    
42. Add quic server interoperability testing for quic-server branch #919
    3 of 4
    subepic +1
43. Determine which SSL handle should be used in callbacks on accepted connections #918
    +0
44. quic feature branch rebase #920
    Spike +1
45. Rebase/Review/Merge quic feature branch #717
    0 of 2
    +0
46. validation token is currently naive #912
    QUIC +1
    
47. Extend qlog subsystem to allow for logging port events #926
    +0
48. QUIC: The SSL_net_read_desired() and SSL_net_write_desired() functions need tests #857
    +0
49. Encrypt validation token #928
    +0
    
50. Send NEW_TOKEN packets #929
    +0
51. Refactor port_default_packet_handler to allow for AEAD validation before we have a channel #936
    +0
52. Add chrome browser client to our interop testing #937
    +0
53. Review existing QUIC documentation to ensure that the information contained there is still accurate #873
    3 of 3
    +0
54. Move the quic-hq-interop-server and quic-hq-interop into more suitable locations #947
    +0