Retry on javax.net.ssl.SSLException ... BAD_DECRYPT

Fixes bazelbuild#18965.

Closes bazelbuild#19321.

PiperOrigin-RevId: 560034218
Change-Id: I19a595fb6ba8e0a4cf46f25b0b33807282ca586c

src/main/java/com/google/devtools/build/lib/remote/RemoteModule.java

@@ -106,6 +106,7 @@
 import io.grpc.Channel;
 import io.grpc.ClientInterceptor;
 import io.grpc.ManagedChannel;
+import io.netty.handler.codec.DecoderException;
 import io.netty.handler.codec.http.HttpResponseStatus;
 import io.reactivex.rxjava3.plugins.RxJavaPlugins;
 import java.io.IOException;
@@ -243,6 +244,13 @@ private static ServerCapabilities getAndVerifyServerCapabilities(
           } else if (msg.contains("operation timed out")) {
             retry = true;
           }
+        } else {
+          // Workaround for a netty bug: https://github.com/netty/netty/issues/11815. Remove this
+          // once it is fixed in the upstream.
+          if (e instanceof DecoderException
+              && e.getMessage().endsWith("functions:OPENSSL_internal:BAD_DECRYPT")) {
+            retry = true;
+          }
         }
         return retry;
       };