1.8.1 upgrade breaks SSL compatibility with some servers #954

Closed
opened 2026-10-05 04:55:17 +02:00 by adam · 2 comments
Owner

I'm trying to connect to a network I had configured perfectly fine in 1.6 and I now get the following error:

Disconnected from IRC (error:1408F10B:SSL routines:ssl3_get_record:wrong version number). Reconnecting...

How do I fix this? It's a vague error message.

I'm trying to connect to a network I had configured perfectly fine in 1.6 and I now get the following error: Disconnected from IRC (error:1408F10B:SSL routines:ssl3_get_record:wrong version number). Reconnecting... How do I fix this? It's a vague error message. <!-- github-sync-id:665033706 -->
adam closed this issue 2026-10-05 04:55:17 +02:00
Author
Owner

How did you compile ZNC? Did you do it yourself? Did you do an OS upgrade? Some OSs disable some versions of the TLS protocol in OpenSSL.

How do I fix this? It's a vague error message.

The error is something like "the other end tried to talk TLS 1.0, but I do not want to talk that". I am not entirely sure and I also find OpenSSL's error messages cryptic.

You could try connecting on the command line with something like openssl s_client -connect irc.freenode.org:6697. This says something like New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 somewhere in the middle (after the certificates). So, this is TLS 1.3. If your IRC server has something else here, my guess about what the issue is could be right.

How did you compile ZNC? Did you do it yourself? Did you do an OS upgrade? Some OSs disable some versions of the TLS protocol in OpenSSL. > How do I fix this? It's a vague error message. The error is something like "the other end tried to talk TLS 1.0, but I do not want to talk that". I am not entirely sure and I also find OpenSSL's error messages cryptic. You could try connecting on the command line with something like `openssl s_client -connect irc.freenode.org:6697`. This says something like `New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384` somewhere in the middle (after the certificates). So, this is TLS 1.3. If your IRC server has something else here, my guess about what the issue is could be right. <!-- github-comment-id:663544410 -->
Author
Owner

What happened? Did you fix your problem? What was the solution?

What happened? Did you fix your problem? What was the solution? <!-- github-comment-id:691679318 -->
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#954