Re: buildfarm server suddenly not talking to old SSL stacks?

On Tue, Jul 17, 2018 at 3:20 PM, Adrian Klaver <adrian.klaver@aklaver.com> wrote:

On 07/16/2018 08:31 PM, Tom Lane wrote:

My buildfarm animals dromedary and prairiedog have been failing since
around 9AM EDT on Sunday.  The buildfarm script output isn't very
detailed:

getting branches of interest (https://buildfarm.postgresql.org/branches_of_inte\
rest.txt) at ./run_branches.pl line 129.

but trying it manually yields

$ curl https://buildfarm.postgresql.org/branches_of_interest.txt
curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

The same thing works fine on newer machines though, as does fetching with
http: instead of https:.  Have we done something recently to create an
incompatibility with old SSL stacks?

Maybe something to do with this?:

https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls