MIME-Version: 1.0
References: <CACMx3pNvi=kxdo1L9zjrp-Qhm9QpdtqxyJO2WriosV_sXQPLSQ@mail.gmail.com>
 <4cbe2e53-0bf3-4a89-bd81-dfb124b4c36e@aklaver.com> <CACMx3pMEtyVctXXcrC3k5-xub46dx9ZYY4BJ5-skBmCSZogWaA@mail.gmail.com>
 <CABUevEyvNqJHmbYKWfgu0EAReYSRr4R7FKHmqU9JCFd6e-0zaQ@mail.gmail.com>
 <CACMx3pOVxUUoAh6hW446V-NuM7F5f=bKf91HkxcfNQ+sW_55FA@mail.gmail.com> <9fb4a4e6-0ba5-4a26-bf0e-4cd7dd29dd26@aklaver.com>
In-Reply-To: <9fb4a4e6-0ba5-4a26-bf0e-4cd7dd29dd26@aklaver.com>
From: Andrej <andrej.groups@gmail.com>
Date: Wed, 14 May 2025 17:30:25 +1200
Message-ID: <CACMx3pOx+h_THFyAtyc1mh6J21x-=EC9BcwF4d_6evEr9PCEBw@mail.gmail.com>
Subject: Re: deb http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main 15
To: Adrian Klaver <adrian.klaver@aklaver.com>
Cc: Magnus Hagander <magnus@hagander.net>, postgresql Forums <pgsql-general@postgresql.org>
Content-Type: multipart/alternative; boundary="00000000000050fbb0063511d994"
Archived-At: <https://www.postgresql.org/message-id/CACMx3pOx%2Bh_THFyAtyc1mh6J21x-%3DEC9BcwF4d_6evEr9PCEBw%40mail.gmail.com>
Precedence: bulk

--00000000000050fbb0063511d994
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, 14 May 2025 at 12:25, Adrian Klaver <adrian.klaver@aklaver.com>
wrote:

> > The problem seems to go away when I change the sources list to utilise
> > https:// instead of the previous default, http://
>
> I don't see that issue on the three Ubuntu machines I have Postgres
> installed from PGDG.
>
> My guess you are seeing this due to apt-cacher-ng.
>
>  From here:
>
> https://www.unix-ag.uni-kl.de/~bloch/acng/html/howtos.html#ssluse
>
> "It is possible to have encrypted access to remote sites via HTTPS
> protocol with recent versions of apt-cacher-ng if the OpenSSL support
> was enabled at compile time. However this leads certain side effects and
> complications; due to the nature of the HTTPS connection model, it is
> not possible to act as an intermediate server (e.g. caching proxy) by
> the same rules as with HTTP:"
>
> "Considering these difficulties, there are three (and a half) methods to
> use SSL."
>
I have no problem believing that - it's just that this "just worked"=E2=84=
=A2 for
the last 8 or so years,
and apt-cacher hasn't seen any changes/updates in years, the source it's
built from on
our Ubuntu instance is from 2022, which makes me think something may have
changed
on the repo site.

Cheers,
Andrej

--=20
Please don't top post, and don't use HTML e-Mail :}  Make your quotes
concise.

http://www.georgedillon.com/web/html_email_is_evil.shtml
http://www.catb.org/jargon/html/email-style.html

--00000000000050fbb0063511d994
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote g=
mail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, 14 May =
2025 at 12:25, Adrian Klaver &lt;<a href=3D"mailto:adrian.klaver@aklaver.co=
m">adrian.klaver@aklaver.com</a>&gt; wrote:<br></div><blockquote class=3D"g=
mail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204=
,204,204);padding-left:1ex">&gt; The problem seems to go away when I change=
 the sources list to utilise <br>
&gt; https:// instead of the previous default, http://<br>
<br>
I don&#39;t see that issue on the three Ubuntu machines I have Postgres <br=
>
installed from PGDG.<br>
<br>
My guess you are seeing this due to apt-cacher-ng.<br>
<br>
=C2=A0From here:<br>
<br>
<a href=3D"https://www.unix-ag.uni-kl.de/~bloch/acng/html/howtos.html#sslus=
e" rel=3D"noreferrer" target=3D"_blank">https://www.unix-ag.uni-kl.de/~bloc=
h/acng/html/howtos.html#ssluse</a><br>
<br>
&quot;It is possible to have encrypted access to remote sites via HTTPS <br=
>
protocol with recent versions of apt-cacher-ng if the OpenSSL support <br>
was enabled at compile time. However this leads certain side effects and <b=
r>
complications; due to the nature of the HTTPS connection model, it is <br>
not possible to act as an intermediate server (e.g. caching proxy) by <br>
the same rules as with HTTP:&quot;<br>
<br>
&quot;Considering these difficulties, there are three (and a half) methods =
to <br>
use SSL.&quot;<br></blockquote><div>I have no problem believing that - it&#=
39;s just that this &quot;just worked&quot;=E2=84=A2 for the last 8 or so y=
ears,</div><div>and apt-cacher hasn&#39;t seen any changes/updates in years=
, the source it&#39;s built from on</div><div>our Ubuntu instance is from 2=
022, which makes me think something may have changed</div><div>on the repo =
site.</div><div></div></div><div><br></div><div>Cheers,</div><div>Andrej</d=
iv><div><br></div><span class=3D"gmail_signature_prefix">-- </span><br><div=
 dir=3D"ltr" class=3D"gmail_signature">Please don&#39;t top post, and don&#=
39;t use HTML e-Mail :} =C2=A0Make your quotes concise.<br><br><a href=3D"h=
ttp://www.georgedillon.com/web/html_email_is_evil.shtml" target=3D"_blank">=
http://www.georgedillon.com/web/html_email_is_evil.shtml</a><br><a href=3D"=
http://www.catb.org/jargon/html/email-style.html" target=3D"_blank">http://=
www.catb.org/jargon/html/email-style.html</a></div></div>

--00000000000050fbb0063511d994--