Unable to establish SSL connection.

Common causes

• An old wget or TLS library without TLS 1.2 or 1.3, or without SNI support.
• The server only accepts TLS versions or ciphers the client does not offer.
• The port does not speak TLS, or a proxy or firewall reset the connection.

How to fix it

1. Read the line printed before this one (for example "OpenSSL: error:... alert handshake failure").
2. Update wget and OpenSSL or GnuTLS, or use curl for comparison.
3. Check the URL uses https:// only on a TLS port, and check https_proxy.