Theo Buehler

See #1078. It would be great if you could check if this addresses the issue.

Most likely an interop issue between gnutls 3.8.x and whatever runs on search.dismail.de server side. All other TLS clients I tried can connect to that server just fine: ```console $...

Thanks for the prompt reply, @ueno. I can confirm that your patch fixes the issues mentioned here.

Thanks. This is fixed in -current by this commit: https://github.com/libressl/portable/commit/cb3679055ae921339a39c235b5abefa246c47630. If we roll 4.2.2, we should regen the man links. cc: @busterb

> Am I missing something here? Can anyone confirm TLS session resumption is working with a TLS 1.3 server? Session resumption in TLSv1.3 requires pre-shared keys which isn't currently implemented...

> Looking through the libressl code, It appears to me that the server-side session resumption code is not even called with TLS 1.3. (and probably not with other TLS versions)....

> Btw if something doesn't work, despite there being an API to enable it, it should be documented somewhere that it doesn't work. I agree with you. This is less...

The readme file tells you to use cmake: https://github.com/libressl/portable?tab=readme-ov-file#emscripten That works in CI on linux.

The only reason is that nobody put in the effort to add it. Thanks for sharing that commit. We'd be perfectly happy to review and land an updated version of...

Thanks for the report. I agree, although the initialization should probably happen in `OPENSSL_init_crypto_internal()` (which is called from `SSL_library_init()`). @bob-beck can you take a look, please?