Upgrade to msquic 2.5

[qzhuyan]

https://github.com/microsoft/msquic/releases/tag/v2.5.0

[Erik675d]

Hi! I was wondering if there is any update or planned timeline regarding this issue?

[qzhuyan]

@Erik675d thanks for asking, it is planned but not prioritised. We are working on the client side https://github.com/emqx/flowsdk.

I am interested to know which feature/fix in v2.5 that interests you? that might help the prioritization.

[Erik675d]

@qzhuyan thanks, for answer. I am mostly concerned about age of current msquic (v2.3.8) used by emqx/quic. v.2.3.8 is almost one year old, it is hard for me to evaluate if there are any vulnerabilities in msquic or used openssl that can be exploited.

In terms of functionality, quic works great for me. I haven’t encountered any missing features I need.

[qzhuyan]

@Erik675d thanks for the info and reminder.
According to the msquic release plan, 2.3 is end of support. (Sept 12 2025)
https://github.com/microsoft/msquic/blob/main/docs/Release.md#releases

Since upgrade to 2.5 needs more adaptions, I will see if we should try to upgrade to 2.4 first.

[qzhuyan]

tracking msquic 2.4 in #389

[Nezteb]

Should this issue be closed as of #390?

[qzhuyan]

@Nezteb I need to test it a bit more.

[qzhuyan]

need a fix in v2.5.7-rc