Getting an https site fails

[ciniglio]

Trying to retrieve: https://taylorpearson.me/feed/

Fails with:
"SSL connection() error: error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error"

I've tried using both the tls opam package and the ssl opam package with openssl 1.0.2n and 1.1.0g

[ryanslade]

I'm seeing the same issue using cohttp-async when hitting this url:
https://www.alphavantage.co/query?function=TIME_SERIES_DAILY&symbol=MSFT&apikey=demo

[mseri]

The alphavantage url works for me with the latest version, while the top one fails with Tls_lwt.Tls_alert Tls.Packet.HANDSHAKE_FAILURE. or Tls_lwt.Tls_alert(6), depending on the SSL implementation used

[mseri]

Looking at the provided handshake, I think this is an instance of mirleft/ocaml-tls#362

[drvink]

This is likely due to widening deployment of TLS 1.3. I've fixed this for the OpenSSL bindings in savonet/ocaml-ssl#45. TLS 1.3 does not seem to be implemented in the native OCaml TLS implementation yet, according to this comment.

[hannesm]

with the rise of tls 0.12.0 (and upcoming 0.12.1), establishing a connection to the above mentioned server works fine. feel free to re-open this issue in case you still have issues to connect to the server.