Skip to content

OpenSSL 3.5.x TLS 1.3 issue on macOS 26 #61867

@julianollivieira

Description

@julianollivieira

Version

v25.4.0

Platform

Darwin 25.1.0 Darwin Kernel Version 25.1.0: Mon Oct 20 19:33:36 PDT 2025; root:xnu-12377.41.6~2/RELEASE_ARM64_T6030 arm64

Subsystem

No response

What steps will reproduce the bug?

node -e "require('https').get('https://registry.npmjs.org', res => console.log(res.statusCode))"

How often does it reproduce? Is there a required condition?

Seems to be random. But works reliably with OpenSSL 3.0.x and fails at random with OpenSSL 3.5.x. Passing --tls-max-v1.2 also works

What is the expected behavior? Why is that the expected behavior?

That OpenSSL 3.5.x can also be used to reliably fetch data from the network

What do you see instead?

node:events:497
        throw er; // Unhandled 'error' event
        ^

  Error: read ECONNRESET
      at TLSWrap.onStreamRead (node:internal/stream_base_commons:216:20)
  Emitted 'error' event on ClientRequest instance at:
      at emitErrorEvent (node:_http_client:107:11)
      at TLSSocket.socketErrorListener (node:_http_client:574:5)
      at TLSSocket.emit (node:events:519:28)
      at emitErrorNT (node:internal/streams/destroy:170:8)
      at emitErrorCloseNT (node:internal/streams/destroy:129:3)
      at process.processTicksAndRejections (node:internal/process/task_queues:90:21) {
    errno: -54,
    code: 'ECONNRESET',
    syscall: 'read'
  }

Additional information

I hope this is enough information. I am not familiar to the inner workings, but this issue definitely feels flakey.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions