Comment 7 for bug 1833039

@benjamin

I believe disabling TLSv1.3 via openssl.cnf tweak would work too, without downgrading openssl.

Ie. Using something like this https://launchpadlibrarian.net/428208982/cap-to-tls1.2.patch

(Probably without the CipherString line, which will raise security requirements higher than the default)