Re: Upcoming compatibility problem of oldstable (and older) vs. certificates from Let's Encrypt

[Christoph Berg <myon@debian.org>]

Re: Stefan Huehner
> Checking openssl / gnutls versions across releases:
> jessie		libssl1.0.0		1.0.1t
> 		libgnutls-deb0-28	3.3.8
> 
> stretch		libssl1.0.2		1.0.2u
> 		libssl1.1		1.1.0l
> 		libgnutls30		3.5.8
> 
> buster		libssl1.0.2		1.0.2u
> 		libssl1.1		1.1.1d
> 		libtnutls30		3.6.7
> 
> bullseye	libssl1.1		1.1.1k
> 		libgnutls30		3.7.1
> 
> Bug present in
> - openssl < 1.1.0
> - gnutls < 3.6.14

Note that stretch and later are using libssl1.1 by default, so only packages
who were actively patched to keep using 1.0 are affected.

Christoph