failed: tls: client offered only unsupported versions: [304]"

[rapatchi]

I have a GRPC client and server where server is implemented over vsock. I am getting the following error when using boringcrypto (used for enabling FIPS compliance).

Currrently this is the error i am getting on the server side after enabling verbose logs.

2023/11/29 14:12:50 INFO: [core] [Server #1] grpc: Server.Serve failed to create ServerTransport: connection error: desc = "ServerHandshake(\"host(2):2759654857\") failed: tls: client offered only unsupported versions: [304]"

Could you let us know what this error message means and how to debug this further ?

[dfawley]

Can you indicate what version of gRPC-Go you were running on the server?

I believe this means your client was attempting to use TLS version 1.3, and your server was not configured to allow that.

[rapatchi]

This issue is because boringcrypto does not support TLS 1.3 and client and server were configured with minversion as 1.3.

golang/go#62372