Re: buildfarm server suddenly not talking to old SSL stacks? - Mailing list pgsql-www

From Magnus Hagander
Subject Re: buildfarm server suddenly not talking to old SSL stacks?
Date
Msg-id CABUevEyu1sWhdsOeGSZ9gmFSUa+WMJpPtpxM4zp9OjvAY1Z8Ug@mail.gmail.com
Whole thread Raw
In response to Re: buildfarm server suddenly not talking to old SSL stacks?  (Adrian Klaver <adrian.klaver@aklaver.com>)
List pgsql-www


On Tue, Jul 17, 2018 at 3:20 PM, Adrian Klaver <adrian.klaver@aklaver.com> wrote:
On 07/16/2018 08:31 PM, Tom Lane wrote:
My buildfarm animals dromedary and prairiedog have been failing since
around 9AM EDT on Sunday.  The buildfarm script output isn't very
detailed:

getting branches of interest (https://buildfarm.postgresql.org/branches_of_inte\
rest.txt) at ./run_branches.pl line 129.

but trying it manually yields

$ curl https://buildfarm.postgresql.org/branches_of_interest.txt
curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

The same thing works fine on newer machines though, as does fetching with
http: instead of https:.  Have we done something recently to create an
incompatibility with old SSL stacks?

Maybe something to do with this?:

https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls

Our buildfarm does not require PCI classification :P 


--

pgsql-www by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: buildfarm server suddenly not talking to old SSL stacks?
Next
From: Tom Lane
Date:
Subject: Re: buildfarm server suddenly not talking to old SSL stacks?