`latest` docker has broken TLS support

[Archmonger]

Is there already an issue for your problem?

• I have checked older issues, open and closed

NZBGet Version

v26.0-stable

Platform

All

Environment

Docker, Linux (Unraid 7.2.3)

Current Behavior

When pulling down nzbgetcom/nzbget:latest, TLS support is completely broken, and provides TLS Handshake Failed errors.

The following does not fix the issue:

• Manually replacing the docker image's built-in cacert.pm
• Modifying CertStore to a different cacert.pem
• Disabling CertVerification
• Disabling CertCheck

Downgrading to tag nzbgetcom/nzbget:v25.4 immediately fixes the issue.

This issue appears to be internal to nzbget, as I can execute wget within the container to fetch SSL or TLS signed content without errors.

Expected Behavior

TLS connections should work

Steps To Reproduce

Install the current nzbgetcom/nzbget:latest image (v26.0)
Attempt to form a connection to any TLS server, from either the download queue, news servers menu, or status menu.

Logs

No response

Extra information

No response

[luckedea]

Very interesting, tried to replicate - and we can't!
Please give more information about your setup - curious about which newsservers providers you use?

@Archmonger

[Archmonger]

I have 6 total news servers. Would need a different contact method to talk specifics, but I'm fairly certain it's not news server specific.

The only notable changes my container is that nzbget's network is routed into a Wireguard container, and my UID/GID are 99/100.

I would have posted logs here, but even at the highest verbosity I didn't get anything more useful than "TLS handshake failed".

[luckedea]

@Archmonger Discord https://discord.gg/mV9Vn9sM7C or email denis@nzbget.com please.
I checked with gluetun (all good both Open and WG), but didn't check with nordlynx (going to try it now) - could be related, especially with a newsserver combo.
Need your help with this one.

[luckedea]

Tested with nordlynx and newsservers you shared, all is well. Can't confirm the problem yet, doing more tests.