I wrote:
>> I'm going to file this as a bug with Red Hat. In the meantime it looks
>> like we can suggest ssl_renegotiation_limit = 0 as a temporary workaround.
> Done at
> https://bugzilla.redhat.com/show_bug.cgi?id=1234487
BTW, we should not feel too awful, because it seems this same update has
also broken sendmail, mysql, and probably other services. Not for the
same reason, but still ...
Red Hat fell down badly on QA'ing this.
regards, tom lane