[Mootjelh]

Over HTTP/3 the client's TLS settings are ignored. This fails against a server with a self-signed certificate:

c := req.C().EnableForceHTTP3().EnableInsecureSkipVerify()
_, err := c.R().Get(url)
// tls: failed to verify certificate: x509: certificate signed by unknown authority

The same goes for SetRootCertsFromFile and client certificates.

The cause is in internal/http3/transport.go. Since the quic-go v0.51.0 sync (8067517) Transport has its own TLSClientConfig field next to the embedded *transport.Options. Nothing sets it, and it shadows Options.TLSClientConfig, so the dial always gets a nil config. Removing the field makes it read the client's config again.

TestHTTP3UsesTheClientTLSConfig starts a local HTTP/3 server with the test certificate and fails on master with the error above. It passes with this change, and ./internal/http3 passes too.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.