Supabase | The Open Source Firebase Alternative

TLS handshake "Connection reset by peer"

Hi Supabase team/community,

Issue: curl/OpenSSL TLS handshake fails with "Connection reset by peer" + "TLS alert, decode error (562)" when connecting to my project.

Details:

Project: https://nhtpxdukwieaddniiayk.supabase.co
WSL Ubuntu 22.04, curl 7.81.0, OpenSSL 3.0.2
TCP connects, ping works (80-120ms), DNS fine
Dies during TLS client hello on ALL paths: /health, /rest/v1/, full data query

*   Trying 172.64.149.246:443...
* Connected to nhtpxdukwieaddniiayk.supabase.co (172.64.149.246) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: DEFAULT@SECLEVEL=1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.0 (OUT), TLS header, Certificate Status (22):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: Connection reset by peer in connection to nhtpxdukwieaddniiayk.supabase.co:443
* Closing connection 0
* TLSv1.0 (OUT), TLS header, Unknown (21):
* TLSv1.3 (OUT), TLS alert, decode error (562):
curl: (35) OpenSSL SSL_connect: Connection reset by peer in connection to nhtpxdukwieaddniiayk.supabase.co:443```

How to help

The user is experiencing a TLS handshake failure with the error 'Connection reset by peer' and 'TLS alert, decode error (562)' when connecting to their Supabase project. The issue occurs during the TLS client hello phase across all paths tested. The environment includes WSL Ubuntu 22.04, curl 7.81.0, and OpenSSL 3.0.2.

Help on Discord