Either this, or the TLS 1.3 code was always buggy, but now it was actually used per default. Question: is there a similar commit in your DNS server? Do you use this DNS server with anything like TLS?
On Sun, 2023-09-24 at 21:31 +0200, Tobias Fiebig wrote: > > > But yes, getting a specific commit there will be helpful. > Sadly it turns out that it is the commit i feared it would be: > > > commit 7b24b93d67daa9c16d665129fd5d3e7dbc583e4f > > Author: Maxim Dounin <mdou...@mdounin.ru> > > Date: Fri Mar 24 02:57:43 2023 +0300 > > > > SSL: enabled TLSv1.3 by default. > > Feared, because it basically puts me back to start w.r.t. what the > root > cause might be; Could be anything that happened to TLSv1.3 code in > either LibreSSL or Nginx.