Re: Upcoming compatibility problem of oldstable (and older) vs. certificates from Let's Encrypt

[Christoph Berg]

Re: Stefan Huehner
> Checking openssl / gnutls versions across releases:
> jessie                libssl1.0.0             1.0.1t
>               libgnutls-deb0-28       3.3.8
> 
> stretch               libssl1.0.2             1.0.2u
>               libssl1.1               1.1.0l
>               libgnutls30             3.5.8
> 
> buster                libssl1.0.2             1.0.2u
>               libssl1.1               1.1.1d
>               libtnutls30             3.6.7
> 
> bullseye      libssl1.1               1.1.1k
>               libgnutls30             3.7.1
> 
> Bug present in
> - openssl < 1.1.0
> - gnutls < 3.6.14

Note that stretch and later are using libssl1.1 by default, so only packages
who were actively patched to keep using 1.0 are affected.

Christoph