Panu wrote https://bugzilla.redhat.com/show_bug.cgi?id=2170878#c126 :

> To me the key points here are
> 1) there's a lot of obsolete/broken crypto out there
> 2) we need better error messages
>
> Properly dealing with 2) needs an API redesign, but we'll try to work out some sort of bandaid solution.

Are better diagnostics sufficient from your point of view, or are you
looking for a different solution?