HandshakeFailure error on CiteSeerX when accessing via HTTPS

[gakada]

It appears that CiteSeerX certificate isn't supported (maybe a rustls issue? e.g., rustls/rustls#512):

await fetch('https://citeseerx.ist.psu.edu')

results in

$ deno run --allow-net test.ts
TLS alert received: Message {
    typ: Alert,
    version: TLSv1_2,
    payload: Alert(
        AlertMessagePayload {
            level: Fatal,
            description: HandshakeFailure,
        },
    ),
}
error: Uncaught (in promise) TypeError: error sending request for url (https://citeseerx.ist.psu.edu/): error trying to connect: received fatal alert: HandshakeFailure

deno installed with curl -fsSL https://deno.land/x/install/install.sh | sh on Arch Linux:

$ deno --version
deno 1.9.2 (release, x86_64-unknown-linux-gnu)
v8 9.1.269.5
typescript 4.2.2

[bnoordhuis]

It's because the server only seems to support ECDHE-RSA-AES128-SHA256¹ but that's a weak cipher (removed in TLSv1.3) and rustls doesn't support it for that reason.

There's not much we can do (or should do.) I suggest to get in touch with the site operator.

¹ I tried quite a few ciphers but it rejects everything except ECDHE-RSA-AES128-SHA256.