crypto/tls: hosted TLS handshake returns success without negotiating TLS #5696

My CLI needs HTTPS with certificate checks. On hosted Linux and Darwin, the selected crypto/tls stub can report a successful handshake without negotiating TLS.

On 2 September 2026, the handshake test from #5635 printed negotiated an unexpected version: 0 with official TinyGo v0.42.0 on both arm64 hosts. Run it with tinygo run testdata/hostcryptotls.go. It should negotiate TLS, exchange data, and reject an untrusted certificate.

Source checked on 18 September 2026. dev at 93940cb6 still selects the stub. This runtime failure is separate from the missing API symbols in #5204 and Darwin system trust roots in #3592. #4273 is a broader network package replacement.

#5635 closed on 17 September with a request for this issue. It depends on the weak pointer hook in #5693 (PR #5633). #5645 closed on 5 September in favor of that work.

Replacement draft PR #5700.