> They all work here, in a 32-bit build, FWIW.

I asked Óscar and the tests fail for him too (on MSYS2). So perhaps it's something specific to the 64-bit version.

> And since TLS is involved, my GnuTLS version is 3.4.15.

3.6.8 is the current one on MSYS2.