arcanicanis on Nostr: I finally got around to digging into it further today: There’s changes in Erlang ...
I finally got around to digging into it further today:
There’s changes in Erlang OTP 24.3.4.3 that cause a bug with ‘middlebox compatibility mode’ in TLSv1.3, whereas with ‘compatibility mode’ it’s supposed to act as if it’s using TLSv1.2 even if it intends to use actually use TLSv1.3 (by doing a “Change Cipher Spec” after server/client hello), if I understand correctly. Nonetheless, there’s some internal logic in Erlang that screws up in that specific release pertaining to this.
The issue was fixed in 24.3.4.5
Meanwhile the OTP releases of Rebased seems to come with Erlang OTP 24.3.4.4 (affected by bug), and while the latest source releases pull in 24.3.4.2 (before the bug).
So I’m stuck with this until there’s another OTP build of Rebased pushed out, or have to switch to a source install.
There’s changes in Erlang OTP 24.3.4.3 that cause a bug with ‘middlebox compatibility mode’ in TLSv1.3, whereas with ‘compatibility mode’ it’s supposed to act as if it’s using TLSv1.2 even if it intends to use actually use TLSv1.3 (by doing a “Change Cipher Spec” after server/client hello), if I understand correctly. Nonetheless, there’s some internal logic in Erlang that screws up in that specific release pertaining to this.
The issue was fixed in 24.3.4.5
Meanwhile the OTP releases of Rebased seems to come with Erlang OTP 24.3.4.4 (affected by bug), and while the latest source releases pull in 24.3.4.2 (before the bug).
So I’m stuck with this until there’s another OTP build of Rebased pushed out, or have to switch to a source install.