bug#48103: 28.0.50; tls connection failing on invoking package-list-packages (and other operations)

[Lars Ingebrigtsen]

wilde@sha-bang.de writes:

> It turns out that setting 'gnutls-algorithm-priority to
> "normal:-vers-tls1.3" fixes the problem for me:
>   (setq gnutls-algorithm-priority "normal:-vers-tls1.3")
>
> The question that still remains is: why is this customization necessary?

It shouldn't be -- gnutls should degrade gracefully here, and your test
with gnutls-cli seems to indicate that it does.  So it sounds like
there's a bug in how Emacs interfaces with the gnutls library in this
situation.

> And why is it only necessary on this NetBSD system but on none of my
> GNU/Linux systems?

Perhaps the version of gnutls on NetBSD doesn't support TLS 1.3?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no