Re: buildfarm server suddenly not talking to old SSL stacks?

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: buildfarm server suddenly not talking to old SSL stacks?
Дата
Msg-id CABUevEzfX9xhFwiwC_b_oCibMh5kXwEh_OkoKpTVV_P+BTTaqA@mail.gmail.com
обсуждение исходный текст
Ответ на Re: buildfarm server suddenly not talking to old SSL stacks?  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: buildfarm server suddenly not talking to old SSL stacks?
Список pgsql-www
Дерево обсуждения


On Tue, Jul 17, 2018 at 7:28 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
Alvaro Herrera <alvherre@2ndquadrant.com> writes:
> On 2018-Jul-16, Tom Lane wrote:
>> My buildfarm animals dromedary and prairiedog have been failing since
>> around 9AM EDT on Sunday. ... Have we done something recently to create an
>> incompatibility with old SSL stacks?

> Yeah, there were a few updates that day at 11am UTC; particularly the
> ca-certificates package was updated (to version 20161130+nmu1+deb9u1).

Ah, that sounds plausibly related.  Guess I need a certificate update
on those machines.  Thanks!

We also changed some of the server setup so there is now a haproxy that's doing the SSL termination. So there is probably a slightly different configuration of available SSL algorithms and such as well. It might be either one of those two, both changes happened not too far apart on that day. 

--

В списке pgsql-www по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: buildfarm server suddenly not talking to old SSL stacks?
Следующее
От: Adrian Klaver
Дата:
Сообщение: Re: buildfarm server suddenly not talking to old SSL stacks?