Weird SSL error: wrong ssl version on some web site

[Zer0-Tolerance]

Hi Jonathan,
Please have a look at this code:

use Cro::HTTP::Client;
my $resp = await Cro::HTTP::Client.get('https://218.97.11.2',ca => { :insecure });

it fails with:

Tried to get the result of a broken Promise
  in block  at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/BF807DCA3C10D2DAA85ADF32F913D016057C1A06 (Cro::HTTP::Client) line 786

Original exception:
    Tried to get the result of a broken Promise
      in block  at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/8F9CE57B4C9E54F00938F862E837CA40DCD18536 (Cro::TLS) line 110

    Original exception:
        An operation first awaited:
          in block  at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 364

        Died with the exception:
            error:1425F10A:SSL routines:ssl_choose_client_version:wrong ssl version
              in sub check at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 838
              in method handle-buffers at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 653
              in block  at /Users/xxx/.rakubrew/versions/moar-2021.07/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 270

while doing a curl or lwp-request works just fine.
I'm using Raku 2021.07 and OpenSSL 1.1.1k 25 Mar 2021 on OS X 11.5.1 but behavior is the same with a docker running linux alpine.

[jnthn]

Can you try it with this applied:

diff --git a/lib/IO/Socket/Async/SSL.pm6 b/lib/IO/Socket/Async/SSL.pm6
index c534453..8e937cb 100644
--- a/lib/IO/Socket/Async/SSL.pm6
+++ b/lib/IO/Socket/Async/SSL.pm6
@@ -373,7 +373,8 @@ class IO::Socket::Async::SSL {
             when 1.1 { OpenSSL::Method::TLSv1_1_client_method() }
             when 1.2 { OpenSSL::Method::TLSv1_2_client_method() }
             default {
-                try { OpenSSL::Method::TLSv1_2_client_method() } ||
+                try { OpenSSL::Method::TLS_client_method() } //
+                    try { OpenSSL::Method::TLSv1_2_client_method() } //
                     try { OpenSSL::Method::TLSv1_client_method() }
             }
         }
@@ -611,7 +612,8 @@ class IO::Socket::Async::SSL {
             when 1.1 { OpenSSL::Method::TLSv1_1_server_method() }
             when 1.2 { OpenSSL::Method::TLSv1_2_server_method() }
             default {
-                try { OpenSSL::Method::TLSv1_2_server_method() } ||
+                try { OpenSSL::Method::TLS_server_method() } //
+                    try { OpenSSL::Method::TLSv1_2_server_method() } //
                     try { OpenSSL::Method::TLSv1_server_method() }
             }
         }

This should make it version insensitive, although on the current machine I'm on it doesn't find TLS_client_method in the native library...

[jubilatious1]

I tried the above code from the OP (@Zer0-Tolerance ) and I'm seeing similar results. Note, I checked afterwards to see if I needed to upgrade Cro::HTTP::Client and zef tells me:

===> Found: Cro::HTTP:ver<0.8.6> [via Zef::Repository::LocalCache]
All requested distributions are already at their latest versions

On Rakudo-2021.06, with OpenSSL 1.1.1l 24 Aug 2021, on MacOS-ancient (ElCap):

RunView perl6 Output Window
===09/23/21 08:55:31===
Tried to get the result of a broken Promise
  in block  at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/BF807DCA3C10D2DAA85ADF32F913D016057C1A06 (Cro::HTTP::Client) line 786

Original exception:
    Tried to get the result of a broken Promise
      in block  at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/8F9CE57B4C9E54F00938F862E837CA40DCD18536 (Cro::TLS) line 110

    Original exception:
        An operation first awaited:
          in block  at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 364

        Died with the exception:
            error:1425F10A:SSL routines:ssl_choose_client_version:wrong ssl version
              in sub check at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 838
              in method handle-buffers at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 653
              in block  at /Users/user/rakudo/rakudo-2021.06/install/share/perl6/site/sources/DC2535A0A8F9C376CD7A8C92E469C35747CBF671 (IO::Socket::Async::SSL) line 270

[Zer0-Tolerance]

Can you try it with this applied:

diff --git a/lib/IO/Socket/Async/SSL.pm6 b/lib/IO/Socket/Async/SSL.pm6
index c534453..8e937cb 100644
--- a/lib/IO/Socket/Async/SSL.pm6
+++ b/lib/IO/Socket/Async/SSL.pm6
@@ -373,7 +373,8 @@ class IO::Socket::Async::SSL {
             when 1.1 { OpenSSL::Method::TLSv1_1_client_method() }
             when 1.2 { OpenSSL::Method::TLSv1_2_client_method() }
             default {
-                try { OpenSSL::Method::TLSv1_2_client_method() } ||
+                try { OpenSSL::Method::TLS_client_method() } //
+                    try { OpenSSL::Method::TLSv1_2_client_method() } //
                     try { OpenSSL::Method::TLSv1_client_method() }
             }
         }
@@ -611,7 +612,8 @@ class IO::Socket::Async::SSL {
             when 1.1 { OpenSSL::Method::TLSv1_1_server_method() }
             when 1.2 { OpenSSL::Method::TLSv1_2_server_method() }
             default {
-                try { OpenSSL::Method::TLSv1_2_server_method() } ||
+                try { OpenSSL::Method::TLS_server_method() } //
+                    try { OpenSSL::Method::TLSv1_2_server_method() } //
                     try { OpenSSL::Method::TLSv1_server_method() }
             }
         }

This should make it version insensitive, although on the current machine I'm on it doesn't find TLS_client_method in the native library...

It works with this fix !