Re: buildfarm server suddenly not talking to old SSL stacks?

Magnus Hagander <magnus@hagander.net> writes:
> On Tue, Jul 17, 2018 at 7:29 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> Both machines show the same behavior with curl:
>> $ curl https://buildfarm.postgresql.org/branches_of_interest.txt
>> curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
>> protocol version

> Ah. Some googling shows that does seem to indicate an old version of
> OpenSSL.
> The old config rejected sslv2 and sslv3, but allowed tlsv1.
> The new one refuses both tlsv1 and tlsv1.1, allowing only tlsv1.2.
> As a check if this might be it, I have at least temporarily removed that
> restriction. Can you try again now?

Same results, both via curl and via perl.