Вообще странные ошибки, как будто вам там не SSL отвечает. Попробуйте посмотреть telnet'ом что там на downloads.tuxfamily.org 443. Можно было бы предположить кривую блокировку, но если из-под windows всё работает то видимо нет. С версией системной openssl это тоже вряд-ли связано, судя по ssl labs хост поддерживает TLS 1.0-1.2, это даже не 1.3, да и в 12.3 openssl не то чтобы древняя. Скорее что-то с настройкой сети - DNS, прокси, роутинг.
У меня так:
Код:
% host downloads.tuxfamily.org
downloads.tuxfamily.org is an alias for downloads.geo.tuxfamily.net.
downloads.geo.tuxfamily.net is an alias for free.downloads.tuxfamily.net.
free.downloads.tuxfamily.net has address 213.36.253.171
free.downloads.tuxfamily.net has address 213.36.253.18
free.downloads.tuxfamily.net has IPv6 address 2a01:e0d:1:3:58bf:fa12:0:1
free.downloads.tuxfamily.net has IPv6 address 2a01:e0d:1:4:58bf:faab:0:1
% openssl s_client -connect downloads.tuxfamily.org:443
CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = absinthe.tuxfamily.org
verify return:1
---
Certificate chain
0 s:CN = absinthe.tuxfamily.org
i:C = US, O = Let's Encrypt, CN = R3
1 s:C = US, O = Let's Encrypt, CN = R3
i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = absinthe.tuxfamily.org
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-384, 384 bits
---
SSL handshake has read 4845 bytes and written 483 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES128-GCM-SHA256
Session-ID: 78550F47C36D460D109687A1096E8ACB59EFD9C969DBB3CF5887F9A0F25DCED0
Session-ID-ctx:
Master-Key: 32070E703E3AF66121CDB1660B4BD9FFB6B8D07AC99B6CC35A84549D30A4D714139D9834D47BF49750A1576128FFCB07
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - a2 70 28 d0 98 8a 46 32-65 66 7b 9d c9 c4 90 8e .p(...F2ef{.....
0010 - 46 b4 db e4 72 90 3d 43-09 20 aa 5f 27 0a 91 08 F...r.=C. ._'...
0020 - 96 70 fd 78 ef 95 b7 48-7b 76 de b7 aa 0d 7e b5 .p.x...H{v....~.
0030 - b3 4d 58 23 97 ad 11 99-d7 77 e0 78 a8 cd 65 86 .MX#.....w.x..e.
0040 - 98 03 db 31 0c 8e ba 9e-e3 9b de 2c 40 ec 10 b4 ...1.......,@...
0050 - 1d 6d 6f 29 75 36 2b e9-dd ab a8 71 34 0c 3d 54 .mo)u6+....q4.=T
0060 - 24 40 3c 56 c0 6e 67 74-4f 45 47 af 67 e0 c8 bc $@<V.ngtOEG.g...
0070 - 44 de c1 35 51 ad f1 cf-23 39 ea 54 67 f9 2d f5 D..5Q...#9.Tg.-.
0080 - 9f 16 40 ac f5 04 95 20-51 e4 a8 29 1c ee a8 d4 ..@.... Q..)....
0090 - 07 af fa 4b fb 15 40 10-e3 50 e9 02 0c 7f 21 c7 ...K..@..P....!.
00a0 - 7e d9 0e 8e 22 36 fa e5-d2 66 6b df 4d 68 34 21 ~..."6...fk.Mh4!
00b0 - ee b1 a1 22 8c fa 1b ed-c7 e8 34 97 c9 2d 04 dd ..."......4..-..
Start Time: 1642513854
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---