Can't download from releases page due to ssl errors - appears to only allow TLS v1?

[paladox]

Select Topic Area

Bug

Body

Hi, I think release-assets.githubusercontent.com is only allowing TLS v1?

wget https://github.com/bazelbuild/rules_nodejs/releases/download/5.8.5/rules_nodejs-5.8.5.tar.gz
--2026-01-05 17:14:59--  https://github.com/bazelbuild/rules_nodejs/releases/download/5.8.5/rules_nodejs-5.8.5.tar.gz
Resolving github.com (github.com)... 20.26.156.215
Connecting to github.com (github.com)|20.26.156.215|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://github.com/bazel-contrib/rules_nodejs/releases/download/5.8.5/rules_nodejs-5.8.5.tar.gz [following]
--2026-01-05 17:14:59--  https://github.com/bazel-contrib/rules_nodejs/releases/download/5.8.5/rules_nodejs-5.8.5.tar.gz
Reusing existing connection to github.com:443.
HTTP request sent, awaiting response... 302 Found
Location: https://release-assets.githubusercontent.com/github-production-release-asset/101107622/557d53bb-7d79-4ce5-bf0e-a9a9cf4e853e?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-01-05T18%3A01%3A33Z&rscd=attachment%3B+filename%3Drules_nodejs-5.8.5.tar.gz&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2026-01-05T17%3A01%3A08Z&ske=2026-01-05T18%3A01%3A33Z&sks=b&skv=2018-11-09&sig=IvuxXrq0OA2WMhOds1u146Dj4Rd90SHvqe7Xm4hMJUo%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2NzYzMzU5OSwibmJmIjoxNzY3NjMzMjk5LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.3aLj0oR-JK8e3ugT5N9U1QL78eJkI-Ny6kZFNrAnjt4&response-content-disposition=attachment%3B%20filename%3Drules_nodejs-5.8.5.tar.gz&response-content-type=application%2Foctet-stream [following]
--2026-01-05 17:14:59--  https://release-assets.githubusercontent.com/github-production-release-asset/101107622/557d53bb-7d79-4ce5-bf0e-a9a9cf4e853e?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-01-05T18%3A01%3A33Z&rscd=attachment%3B+filename%3Drules_nodejs-5.8.5.tar.gz&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2026-01-05T17%3A01%3A08Z&ske=2026-01-05T18%3A01%3A33Z&sks=b&skv=2018-11-09&sig=IvuxXrq0OA2WMhOds1u146Dj4Rd90SHvqe7Xm4hMJUo%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2NzYzMzU5OSwibmJmIjoxNzY3NjMzMjk5LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.3aLj0oR-JK8e3ugT5N9U1QL78eJkI-Ny6kZFNrAnjt4&response-content-disposition=attachment%3B%20filename%3Drules_nodejs-5.8.5.tar.gz&response-content-type=application%2Foctet-stream
Resolving release-assets.githubusercontent.com (release-assets.githubusercontent.com)... 185.199.110.133, 185.199.109.133, 185.199.111.133, ...
Connecting to release-assets.githubusercontent.com (release-assets.githubusercontent.com)|185.199.110.133|:443... connected.
OpenSSL: error:0A0000C6:SSL routines::packet length too long
OpenSSL: error:0A000139:SSL routines::record layer failure
Unable to establish SSL connection.

curl -I https://release-assets.githubusercontent.com
curl: (35) LibreSSL/3.3.6: error:1404B42E:SSL routines:ST_CONNECT:tlsv1 alert protocol version

Running Mac 26.2. Safari fails, chrome as well and in addition terminal also fails.

[github-actions[bot]]

💬 Your Product Feedback Has Been Submitted 🎉

Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users.

Here's what you can expect moving forward ⏩

• Your input will be carefully reviewed and cataloged by members of our product teams. 
  • Due to the high volume of submissions, we may not always be able to provide individual responses.
  • Rest assured, your feedback will help chart our course for product improvements.
• Other users may engage with your post, sharing their own perspectives or experiences. 
• GitHub staff may reach out for further clarification or insight. 
  • We may 'Answer' your discussion if there is a current solution, workaround, or roadmap/changelog post related to the feedback.

Where to look to see what's shipping 👀

• Read the Changelog for real-time updates on the latest GitHub features, enhancements, and calls for feedback.
• Explore our Product Roadmap, which details upcoming major releases and initiatives.

What you can do in the meantime 💻

• Upvote and comment on other user feedback Discussions that resonate with you.
• Add more information at any point! Useful details include: use cases, relevant labels, desired outcomes, and any accompanying screenshots.

As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities.

Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐

[kazukazus19610605-ai]

https://github.blog/changelog/

[amish-go]

This isn’t a GitHub-side issue. release-assets.githubusercontent.com requires TLS 1.2+, but your client (LibreSSL 3.3.6 / older wget or curl) is negotiating an unsupported TLS version, which causes the tlsv1 alert protocol version error.

Updating wget/curl and the SSL library, or using a newer environment, should resolve this.

[paladox]

I tried updating LibreSSL but the apple curl doesn't use it and when I try and use homebrew curl it fails with curl: (35) TLS connect error: error:0A00010B:SSL routines::wrong version number

curl 8.17.0 (aarch64-apple-darwin25.0.0) libcurl/8.17.0 OpenSSL/3.6.0 zlib/1.2.12 brotli/1.2.0 zstd/1.5.7 AppleIDN libssh2/1.11.1 nghttp2/1.68.0 ngtcp2/1.19.0 nghttp3/1.14.0 librtmp/2.3 mit-krb5/1.7-prerelease
Release-Date: 2025-11-05
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AppleSecTrust AsynchDNS brotli GSS-API HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd

[paladox]

it appears it was the router blocking this... it has advanced threat protection and considered the site a threat for some reason.

[amish-go]

ohh lol

[MagicManUSA]

Yeah but it my case it just started working again.

[Pizza67]

Having problems on Nobara 43 on Firefox. Can't download any releases get this error code SSL_ERROR_RX_RECORD_TOO_LONG.

Same issue raised for a couple of days when trying to download a new gradle version from release assets (https://github.com/gradle/gradle-distributions/releases/download/v8.11.0/gradle-8.11-bin.zip). This only happens when the download request comes from my CI/CD chain that use a web proxy to get the resource.