Moench-Tegeder
Cc : Cedric Rey ; pgsql-general@lists.postgresql.org
Objet : Re: Certificate validity error download.postgresql.org
Christoph Moench-Tegeder writes:
> I do know from my own experience that at least the "old"
> (2020.2.something) Redhat package is missing the new &
Cedric Rey writes:
> rpm -q ca-certificates --changelog
> * Tue Sep 14 2021 Bob Relyea - 2021.2.50-72
> - Fix expired certificate.
> -Removing:
> - # Certificate "DST Root CA X3"
> As you can see they just remove the old "DST Root CA X3" in the latest el7
> ca-certificate version which
Christoph Moench-Tegeder writes:
> I do know from my own experience that at least the "old" (2020.2.something)
> Redhat package is missing the new "ISRG Root X1" certificate, you'll
> need version 2021.2.something.
Seems unlikely that it changed that recently, for a couple of reasons:
* AFAICT,
: Re: Certificate validity error download.postgresql.org
## Cedric Rey (ce...@groupemutuel.ch):
> the certificate on download.postgresql.org has expired :
>
> openssl s_client -connect download.postgresql.org:443
> CONNECTED(0003)
> depth=3 O = Digital Signature Trust Co., CN = D
## Cedric Rey (ce...@groupemutuel.ch):
> the certificate on download.postgresql.org has expired :
>
> openssl s_client -connect download.postgresql.org:443
> CONNECTED(0003)
> depth=3 O = Digital Signature Trust Co., CN = DST Root CA X3
> verify error:num=10:certificate has expired
> notAfter
> On 14 Oct 2021, at 14:34, Cedric Rey wrote:
> the certificate on download.postgresql.org has expired :
Are you perhaps running an old version of OpenSSL?
--
Daniel Gustafsson https://vmware.com/
