ADDITIONAL SYSTEM INFORMATION :
Rockylinux in docker container

A DESCRIPTION OF THE PROBLEM :
https://bugs.openjdk.org/browse/JDK-8235311 using default TLSv1.3 against Azure Application Gateway version is having this same tag mismatch error.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Using jmeter against Azure Application Gateway version 2 for TLS offloading.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Works fine in TLS 1.3
ACTUAL -
Fails up to 40% of the time with tag mismatch error. Solved through setting protocol on client/java code to TLSv1.2