操，放弃了，手动编译了一遍 NZBGet , tls1.3 还是报错。openssl 确实是最新版本。
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG getaddrinfo for news-us.newsgroup.ninja: 0 (Connection.cpp:599:DoConnect)
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG Starting TLS (Connection.cpp:993:StartTls)
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG Do disconnecting (Connection.cpp:861:DoDisconnect)
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG Destroying Connection (Connection.cpp:146:~Connection)
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG Disconnecting (Connection.cpp:187:Disconnect)
Tue Mar 22 16:02:07 2022 16960 140204677510912 DEBUG Response="Could not select cipher for TLS: error:1410F0B9:SSL routines:SSL_set_cipher_list:no cipher match" (XmlRpc.cpp:538:BuildResponse)
对端也支持 1.3 的
root@debian:~# openssl s_client -connect news-us.newsgroup.ninja:563 -ciphersuites TLS_AES_128_GCM_SHA256
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN =
news.sslusenet.comverify return:1
---
Certificate chain
0 s:CN =
news.sslusenet.com i:C = US, O = Let's Encrypt, CN = R3
1 s:C = US, O = Let's Encrypt, CN = R3
i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIIqDCCB5CgAwIBAgISBLvFSa8Jk6lggwq6fPmwSIrWMA0GCSqGSIb3DQEBCwUA
···
bzBq56cGGykABTj3
-----END CERTIFICATE-----
subject=CN =
news.sslusenet.comissuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5716 bytes and written 375 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_128_GCM_SHA256
Session-ID: 2426EEC4692BCF9F8D32F5EBC160B965EF6D023EE50F5FDDF041022EBB3C8167
Session-ID-ctx:
Resumption PSK: 18A84FA1AA70A75ED939A6B794739177BFB8F2E2648737BC6F00B6F48309B33A
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
···
Start Time: 1647937881
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_128_GCM_SHA256
Session-ID: 02BE66E7987ADFC7BE186E3100B099F98308BA5DFC57E3ADC8DBDA334AD6F006
Session-ID-ctx:
Resumption PSK: FB03F12785AB46C850CB131C049C35559C08FFB06BFAE8529AC96F333FC59E3A
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
···
Start Time: 1647937881
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 0
---
read R BLOCK
200 Welcome