Created attachment 1881276 [details] packet capture from a F36 system running the HTTPS example code Description of problem: Using tcltls on F36 with openssl 3.0 produces garbage on the wire, causing handshakes to fail. Version-Release number of selected component (if applicable): tcltls-1.7.22-5.fc36 How reproducible: Always Steps to Reproduce: Using the example from https://core.tcl-lang.org/tcltls/wiki?name=Documentation#HTTPS%20EXAMPLE in tclsh: On a F35 system: % package require http 2.9.1 % package require tls 1.7.22 % http::register https 443 [list ::tls::socket -autoservername true -require true -cadir /etc/ssl/certs] 443 {::tls::socket -autoservername true -require true -cadir /etc/ssl/certs} % set tok [http::geturl https://www.tcl.tk/] ::http::1 On a F36 system: % package require http 2.9.5 % package require tls 1.7.22 % http::register https 443 [list ::tls::socket -autoservername true -require true -cadir /etc/ssl/certs] 443 {::tls::socket -autoservername true -require true -cadir /etc/ssl/certs} % set tok [http::geturl https://www.tcl.tk/] failed to use socket Looking at a packet capture, whatever goes out on the wire does not look like a TLS handshake. A TLS handshake should start with 0x16 (CLIENT HELLO), the data sent by tcltls on F36 starts with 0x01. A pcap is attached.
FEDORA-2022-04b9b8ad57 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2022-04b9b8ad57
FEDORA-2022-1e268c4a41 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e268c4a41
FEDORA-2022-04b9b8ad57 has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-04b9b8ad57` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-04b9b8ad57 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-1e268c4a41 has been pushed to the Fedora 35 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-1e268c4a41` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e268c4a41 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-7db3dd69a4 has been pushed to the Fedora 36 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-7db3dd69a4` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-7db3dd69a4 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-7db3dd69a4 has been pushed to the Fedora 36 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2022-04b9b8ad57 has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2022-1e268c4a41 has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report.