microsoft / microsoft/WSL

TLS 1.3 error

Open
#14,153 5 comments 3 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

### Windows Version

Microsoft Windows [Version 10.0.26200.7705]

### WSL Version

2.6.3.0

### Are you using WSL 1 or WSL 2?

- [x] WSL 2
- [ ] WSL 1

### Kernel Version

Linux version 6.6.87.2-microsoft-standard-WSL2 (root@439a258ad544) (gcc (GCC) 11.2.0, GNU ld (GNU Binutils) 2.37) #1 SMP PREEMPT_DYNAMIC Thu Jun 5 18:30:46 UTC 2025

### Distro Version

archlinux

### Other Software

_No response_

### Repro Steps

curl https://repo.packagist.org/packages.json -v

### Expected Behavior

{"packages":[],"notify-batch":"https://packagist.org/downloads/","providers-url":"/p/%package%$%hash%.json","metadata-url":"https://repo.packagist.org/p2/%package%.json","metadata-changes-url":"https://packagist.org/metadata/changes.json","search":"https://packagist.org/search.json?q=%query%&type=%type%","list":"https://packagist.org/packages/list.json","security-advisories":{"metadata":true,"api-url":"https://packagist.org/api/security-advisories/"},"providers-api":"https://packagist.org/providers/%package%.json","warning":"Support for Composer 1 has been shutdown on September 1st 2025. You should upgrade to Composer 2. See https://blog.packagist.com/shutting-down-packagist-org-support-for-composer-1-x/","warning-versions":"<1.999","providers":[]}

### Actual Behavior

* Host repo.packagist.org:443 was resolved.
* IPv6: 2400:52e0:1e00:2::1333:1
* IPv4: 138.199.36.9
* Trying [2400:52e0:1e00:2::1333:1]:443...
* Immediate connect fail for 2400:52e0:1e00:2::1333:1: Network is unreachable
* Trying 138.199.36.9:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* SSL Trust Anchors:
* CAfile: /etc/ssl/certs/ca-certificates.crt
* Recv failure: Connection reset by peer
* TLS connect error: error:00000000:lib(0)::reason(0)
* OpenSSL SSL_connect: Connection reset by peer in connection to repo.packagist.org:443
* closing connection #0
curl: (35) Recv failure: Connection reset by peer

### Diagnostic Logs

in ubuntu-24.04 it works good, but in archlinux and debian it didn't work because of newer version of openssl
ubuntu - 3.0.13 - works good
debian - 3.5.4 - didn't work
archlinux 3.6.1-1 - didn'work

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the supplied curl command against repo.packagist.org on WSL 2 with Arch Linux and Debian, then compare it with Ubuntu 24.04. Use the verbose TLS output and the listed OpenSSL versions to narrow down whether the failure is in WSL networking or TLS compatibility; done means an identified cause and a confirmed resolution or actionable next step.

Written by the indexing model from the issue text.

Assessment

Tech stack
arch-linux, debian, linux, ubuntu
Domain
networking, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.