[tor-bugs] #25426 [Internal Services/Tor Sysadmin Team]: Failure to download Tor Browser (curl --tlsv1.2 fail)

[Tor Bug Tracker & Wiki]

#25426: Failure to download Tor Browser (curl --tlsv1.2 fail)
-------------------------------------------------+-------------------------
 Reporter:  0brand                               |          Owner:  tpa
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  Tor Browser Download SSL failure     |  Actual Points:
  curl --tlsv1.2                                 |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by adrelanos):

 Failing:

 {{{
 curl --tlsv1.2
 https://www.torproject.org/projects/torbrowser/RecommendedTBBVersions
 }}}

 > `curl: (35) error:14077102:SSL
 routines:SSL23_GET_SERVER_HELLO:unsupported protocol`

 ----

 Working, but low TLS version:

 {{{
 curl --tlsv1.0
 https://www.torproject.org/projects/torbrowser/RecommendedTBBVersion
 }}}

 {{{--tlsv1.2}}} was working previously. The TLS downgrade was done around
 26 Feb 2018. So this is a regression.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25426#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online