[tor-bugs] #28245 [Core Tor/Tor]: Tor nodes with OpenSSL 1.1.1 can't communicate with each other

[Tor Bug Tracker & Wiki]

#28245: Tor nodes with OpenSSL 1.1.1 can't communicate with each other
------------------------------+-------------------------------------
     Reporter:  asn           |      Owner:  (none)
         Type:  defect        |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.3.5.x-final
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  openssl tor-tls tls-1.3
Actual Points:                |  Parent ID:
       Points:                |   Reviewer:
      Sponsor:                |
------------------------------+-------------------------------------
 We seem to have trouble in networks where both clients and relays are
 running openssl-1.1.1 . In particular, a chutney network on `openssl-1.1.1
 (11 sept 2018)` will have its clients fail to bootstrap because they cant
 communicate any bytes after the SSL handshake is done.

 The problem might be that 1.1.1 is the version that introduces TLS-1.3, so
 these nodes are trying to do TLS-1.3 with each other.

 Thanks to teor, dgoulet, nickm for the debug help.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28245>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online