bin/58642: openssl or certificate problem on NetBSD 10

[Thomas Klausner <wiz%NetBSD.org@localhost>]

>Number:         58642
>Category:       bin
>Synopsis:       openssl or certificate problem on NetBSD 10
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Aug 25 18:00:00 +0000 2024
>Originator:     Thomas Klausner
>Release:        NetBSD 10.99.11
>Organization:

>Environment:
	
	
Architecture: x86_64
Machine: amd64
>Description:
On NetBSD 10, fetching any go module (and for some other servers as well)
is noisy.

E.g.:
cd /usr/pkgsrc/devel/lazygit
make checksum
...
=> Fetching google.golang.org_genproto_@v_v0.0.0-20200224152610-e50cd9704f63.mod
=> Total size: 287 bytes
Trying [2a00:1450:4001:82a::2011]:443 ...
Requesting https://proxy.golang.org/google.golang.org/genproto/@v/v0.0.0-20200224152610-e50cd9704f63.mod
  0% |                                                                                                                                                           |     0        0.00 KiB/s    --:-- ETA
FFFFFFFFFFFFFFFF:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:/usr/src/crypto/external/bsd/openssl/dist/ssl/record/rec_layer_s3.c:303:
100% |***********************************************************************************************************************************************************|   287      969.80 KiB/s    00:00 ETA
287 bytes retrieved in 00:00 (796.23 KiB/s)

This happens for every single file downloaded from proxy.golang.org,
but also for other servers, like www.gnupg.org (security/gnutls):

# make checksum
=> Bootstrap dependency digest>=20211023: found digest-20220214
=> Fetching gnutls-3.8.7.1.tar.xz
=> Total size: 6695404 bytes
Trying [2001:aa8:fff1:2100::60]:443 ...
Requesting https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.7.1.tar.xz
  0% |                                                                                                                                                           |     0        0.00 KiB/s    --:-- ETA
FFFFFFFFFFFFFFFF:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:/usr/src/crypto/external/bsd/openssl/dist/ssl/record/rec_layer_s3.c:303:
100% |***********************************************************************************************************************************************************|  6538 KiB   12.20 MiB/s    00:00 ETA
6695404 bytes retrieved in 00:00 (12.20 MiB/s)
=> Checksum BLAKE2s OK for gnutls-3.8.7.1.tar.xz
=> Checksum SHA512 OK for gnutls-3.8.7.1.tar.xz

This problem does not occur on NetBSD-10.99.11.
>How-To-Repeat:
cd /usr/pkgsrc/security/gnutls
make checksum

or
cd /usr/pkgsrc/devel/lazygit
make checksum

>Fix:
please.

>Unformatted: