QUIC

QUIC

Wirecat supports a QUIC single-stream transport when it is built against an OpenSSL version that exposes the OpenSSL QUIC APIs.

Client

wcat connect --quic --alpn h3 example.com 443

For another Wirecat peer, the default ALPN can be used:

wcat connect --quic service.example 8443

Listener

wcat listen --quic --cert server.crt --key server.key 0.0.0.0 8443

QUIC With PTY

For a local lab:

wcat listen --quic --tls-insecure --cert server.crt --key server.key --pty --exec /bin/bash 127.0.0.1 8443
wcat connect --quic --tls-insecure 127.0.0.1 8443

Certificate Verification

QUIC uses the same TLS verification options as TLS mode:

wcat connect --quic --ca-file ./ca.pem --sni service.example service.example 8443

OpenSSL Requirement

If the linked OpenSSL build does not provide QUIC support, Wirecat keeps the --quic CLI visible but exits with a clear runtime error.

Check your OpenSSL version:

openssl version -a

If QUIC handshakes fail, verify both peers are built with compatible OpenSSL QUIC support and use matching ALPN and certificate settings.