MIME-Version: 1.0
References: 
 <CAB_5SReU8qC80UYd6GmWNxi5tJCJvJ_FUUnVq-S5VpB8aULDaA@mail.gmail.com>
 <CABUevEz8C2Kx14Rf0hfDAnBVwHkcxnp0a6SC1znM5ZLUScFeQA@mail.gmail.com>
In-Reply-To: 
 <CABUevEz8C2Kx14Rf0hfDAnBVwHkcxnp0a6SC1znM5ZLUScFeQA@mail.gmail.com>
From: Jim Mlodgenski <jimmy76@gmail.com>
Date: Fri, 8 Oct 2021 12:17:09 -0400
Message-ID: 
 <CAB_5SRf=10RqgTkbz_=wGOfDUNP2yOZ0hKTKtEHCd8RXK7PD3A@mail.gmail.com>
Subject: Re: Expired cert
To: Magnus Hagander <magnus@hagander.net>
Cc: PostgreSQL WWW <pgsql-www@lists.postgresql.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: 
 <https://www.postgresql.org/message-id/CAB_5SRf%3D10RqgTkbz_%3DwGOfDUNP2yOZ0hKTKtEHCd8RXK7PD3A%40mail.gmail.com>
Precedence: bulk

On Fri, Oct 8, 2021 at 11:42 AM Magnus Hagander <magnus@hagander.net> wrote=
:
>
> More to the point, your client needs a nudge.  The certificate has not ex=
pired, but you are using a version of OpenSSL that's terribly out of date. =
All (or most at least? But I think all) non-EOL distros should do that by d=
efault if you just apply their updates. See for example https://letsencrypt=
.org/2021/10/01/cert-chaining-help.html and https://letsencrypt.org/docs/ce=
rtificate-compatibility/
>
Thanks. I didn't notice the root cert expired last week. Updating
OpenSSL did the trick.