RESOLVED: Some providers have been discarded due to unexpected errors

Issue

Running Ubuntu 20.04.4 LTS via Windows Subsystem for Linux (WSL) on Windows 11 if you receive this error “Some providers have been discarded due to unexpected errors” try adding the --debug flag. In my case, I saw 'SSL routines', 'tls12_check_peer_sigalg', 'wrong signature type'

This is saying that the SSL security level is set too high on Ubuntu 20.04 to work with those providers.

Request

Provide a user-friendly error to the user if the OS SSL Security is too high – or increase the security.

Workaround

Lower the SSL Security Level to 1 on Ubuntu 20.04

Edit openssl.conf file:

sudo nano /etc/ssl/openssl.cnf Extra points if you use vi

Add this line to the top:

openssl_conf = openssl_init

And these lines to the very bottom:

[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
CipherString = DEFAULT@SECLEVEL=1

[pitsi]

Sorry for bringing this back up, but I was about to open an issue about discarded providers and I just came accross your solution. I am on openssl 3.0.3 though (debian testing/unstable x64). Also, ubuntu 22.04 is on 3.0.2, so this may interest someone else too.

All the forementioned parts are already there, so there is nothing to add, but the last one under [system_default_sect] is a bit different

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT:@SECLEVEL=2

Any ideas? It would also be nice if the above were set only for the user instead of being system wide.

[pitsi]

I got access to a vm with debian 11 yesterday and tried the workaround mentioned at the start. I am delighted to say that it works flawlessly. Zero errors, just a confirmation that 1 subtitle file was downloaded.

So, besides request above for a way to change the settings for the user only and not system wide, what other changes must be done for the distros that are on libssl 3.x?