Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mOcF9-0001fE-8q for pgsql-pkg-debian@arkaria.postgresql.org; Fri, 10 Sep 2021 08:50:43 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mOcF8-00030j-6F for pgsql-pkg-debian@arkaria.postgresql.org; Fri, 10 Sep 2021 08:50:42 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mOcF8-0002zX-0x for pgsql-pkg-debian@lists.postgresql.org; Fri, 10 Sep 2021 08:50:42 +0000 Received: from feynman.df7cb.de ([195.49.152.168]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mOcF5-0002te-Nd for pgsql-pkg-debian@postgresql.org; Fri, 10 Sep 2021 08:50:41 +0000 Received: from msg.df7cb.de (unknown [IPv6:2003:5b:203b:100:7627:eaff:fe52:8e03]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by feynman.df7cb.de (Postfix) with ESMTPSA id 4H5V2N736Jz3Dx6; Fri, 10 Sep 2021 10:50:36 +0200 (CEST) Date: Fri, 10 Sep 2021 10:50:36 +0200 From: Christoph Berg To: Stefan Huehner Cc: pgsql-pkg-debian@postgresql.org, sysadmins Subject: Re: apt.postgresql.org repo via https will fail will some users starting 2021-10-01 Message-ID: Mail-Followup-To: Christoph Berg , Stefan Huehner , pgsql-pkg-debian@postgresql.org, sysadmins References: <20210908164806.GC6114@huehner.biz> <20210909151508.GE6114@huehner.biz> <20210909165708.GG6114@huehner.biz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210909165708.GG6114@huehner.biz> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Re: Stefan Huehner > But now thinking they could be affected (but special cases only) > - There may be a case for running PostgreSQL instances > - As this affects any 'client' using above older libraries On stretch and later, PG is linked against libssl1.1 which is safe, so we are not affected. (jessie is EOL.) Christoph