Wireshark 3.0.2 seems to expect TLS 1.3 Hello Retry Messages as specified before RFC 8446 version 22, and not the current version of the RFC.
Specifically, as far as I can tell, before version 22, the Hello Retry Message was much simpler than after that version--it had just the protocol version, cipher suite, and extensions. since version 22, the message is pretty much the same as the Server Hello including a (non-random) random field, compression method, etc.
By the way, there is something that might be related in comment #83 for Bug 12779, but I don't understand what this comment is about.
What am I missing?
