apt/test/integration/test-apt-https-transient, branch mainDebians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=main2026-06-10T13:07:30Zaptwebserver: Refuse client immediately on TLS handshake2026-06-10T13:07:30ZDavid Kalnischkiesdavid@kalnischkies.de2026-02-05T21:18:40Zurn:sha1:49e91b96d9faeca50ab0b212174744938d446132
We implement a HTTP-only server here (that is wrapped by stunnel for
HTTPS support), so if a TLS handshake reaches us it is always wrong
and we can just close the connection immediately instead of accepting
it and letting the client run into a timeout as we will never receive
the message(s) we expect.
This happens e.g. with browsers like Firefox that opportunistically
try https first (even if you ask for http and specify a port).
Turn TLS handshake issues into transient errors2021-05-12T11:06:11ZJulian Andres Klodejulian.klode@canonical.com2021-05-11T14:04:10Zurn:sha1:2129ffecc084ca772af75418225c5551631e6278
This makes them retriable, and brings them more into line with
TCP, where handshake is also a transient error.
LP: #1928100