On Mon, Nov 05, 2018 at 12:28:50AM +0100, Sebastian Andrzej Siewior wrote: > > No, it is not. It is a TLS1.3 issue. If I limit max protocol to TLS1.2 > then the testsuite passes. The problem with TLS1.3 could be that > SSL_read() could return SSL_ERROR_WANT_READ asking to do the same. Was > there a workaround for this or do I mix up things? > Anyway, it seems that SSL_connect() returns SSL_ERROR_WANT_READ.
I'm not sure if there actually changed something related to SSL_connect(), it could always return SSL_ERROR_WANT_READ, I expect it to return that for a non-blocking socket when it's waiting for the server hello. Or are you seeing it with a blocking socket? I can't think of a reason why that should have changed. Kurt