One of our servers is currently running on postgres 9.2 using the 9.2.9-1.pgdg70+1 packages from pgdg.
After an apt update this morning which brought in the libpq5 package version 9.4.0-1.pgdg70+1, connections to the
databasestarted failing with SSL errors logged on the server:
[unknown] [unknown] LOG: could not accept SSL connection: digest too big for rsa key
Rolling back the server and client to libpq5 version 9.3.5-2.pgdg70+1 fixed it.
This is running on an otherwise up-to-date Debian Wheezy. The SSL certificate is locally issued using an internal CA
whichhas been added to the local trust store. SSL-related config options are left set to the defaults.
--
Chris Butler
Zedcore Systems Ltd
Telephone: 0114 303 0666
Direct dial: 0114 303 0572