[Pkg-rust-maintainers] Bug#1088298: reportbug: cargo fails to clone repositories from github.com due to a TLS problem

[Justus Winter]

Package: cargo
Version: 1.82.0+dfsg1-2
Severity: normal

Dear Maintainer,

cargo from Debian fails to clone git repositories from github.com, for
example:

% cargo --version
cargo 1.82.0 (8f40fc59f 2024-08-21)
% cargo install --git https://github.com/meta-rust/rust-hello-world
    Updating git repository `https://github.com/meta-rust/rust-hello-world`
error: failed to clone into: /home/teythoon/.cargo/git/db/rust-hello-world-1fbd72c4e19584b8

Caused by:
  network failure seems to have happened
  if a proxy or similar is necessary `net.git-fetch-with-cli` may help here
  https://doc.rust-lang.org/cargo/reference/config.html#netgit-fetch-with-cli

Caused by:
  SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer; class=Ssl (16)

In contrast, cargo 1.82 from rustup works just fine.  This, in
combination with the error message, makes me think that the TLS
handshake failed, perhaps because client and server couldn't agree on
a cipher suite, and that the difference to rustup's cargo is a build
option.

Best,
Justus

-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (700, 'unstable'), (500, 'testing-debug'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (400, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.11.7-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cargo depends on:
ii  binutils               2.43.1-5
ii  clang                  1:16.0-58.1
ii  clang-14 [c-compiler]  1:14.0.6-20
ii  clang-16 [c-compiler]  1:16.0.6-27+b1
ii  gcc [c-compiler]       4:14.2.0-1
ii  gcc-12 [c-compiler]    12.4.0-2
ii  gcc-14 [c-compiler]    14.2.0-8
ii  libc6                  2.40-3
ii  libcurl4t64            8.11.0-1
ii  libgcc-s1              14.2.0-8
ii  libgit2-1.8            1.8.4+ds-2
ii  libsqlite3-0           3.46.1-1
ii  libssh2-1t64           1.11.1-1
ii  libssl3t64             3.3.2-2
ii  rustc                  1.82.0+dfsg1-2
ii  zlib1g                 1:1.3.dfsg+really1.3.1-1+b1

cargo recommends no packages.

Versions of packages cargo suggests:
ii  cargo-doc  1.82.0+dfsg1-2
ii  python3    3.12.6-1

-- no debconf information