sudo apt-get update --allow-releaseinfo-change

##</code><code>##

$ lsb_release -a
No LSB modules are available.
Distributor ID:	Raspbian
Description:	Raspbian GNU/Linux 10 (buster)
Release:	10
Codename:	buster
$ 

##</code><code>##

       Notice that this is distinct from checking signatures on a per package
       basis. It is designed to prevent two possible attacks:

       •   Network "man in the middle" attacks. Without signature checking,
           malicious agents can introduce themselves into the package download
           process and provide malicious software either by controlling a
           network element (router, switch, etc.) or by redirecting traffic to
           a rogue server (through ARP or DNS spoofing attacks).

       •   Mirror network compromise. Without signature checking, a malicious
           agent can compromise a mirror host and modify the files in it to
           propagate malicious software to all users downloading packages from
           that host.

##</code><code>##

$ alias sc
alias sc='sudo cpan'
$ 
##</code><code>##

$ sc
Loading internal logger. Log::Log4perl recommended for better logging

Starting with version 2.29 of the cpan shell, a new download mechanism
is the default which exclusively uses cpan.org as the host to download
from. The configuration variable pushy_https can be used to (de)select
the new mechanism. Please read more about it and make your choice
between the old and the new mechanism by running

    o conf init pushy_https

Once you have done that and stored the config variable this dialog
will disappear.
Terminal does not support AddHistory.

To fix that, maybe try>  install Term::ReadLine::Perl


cpan shell -- CPAN exploration and modules installation (v2.29)
Enter 'h' for help.

cpan[1]> o conf init pushy_https
Boolean. Defaults to true. If this option is true, the cpan shell will
use https://cpan.org/ to download stuff from the CPAN. It will fall
back to http://cpan.org/ if it can't handle https for some reason
(missing modules, missing programs). Whenever it falls back to the
http protocol, it will issue a warning.

If this option is true, the option C<urllist> will be ignored.
Consequently, if you want to work with local mirrors via your own
configured list of URLs, you will have to choose no below.

 <pushy_https>
Do you want to turn the pushy_https behaviour on? [yes] 


Please remember to call 'o conf commit' to make the config permanent!

cpan[2]> o conf commit
commit: wrote '/root/.cpan/CPAN/MyConfig.pm'

cpan[3]> q
Terminal does not support GetHistory.
Lockfile removed.
$ 
$ sudo grep pushy /root/.cpan/CPAN/MyConfig.pm
  'pushy_https' => q[1],
$ 

##</code><code>##

cpan[1]> install Regexp::Pattern
Reading '/root/.cpan/Metadata'
  Database was generated on Mon, 28 Feb 2022 23:41:02 GMT
Running install for module 'Regexp::Pattern'
Fetching with HTTP::Tiny:
https://cpan.org/authors/id/P/PE/PERLANCAR/Regexp-Pattern-0.2.14.tar.gz
HTTP::Tiny failed with an internal error: IO::Socket::SSL 1.42 must be installed for https support
Net::SSLeay 1.49 must be installed for https support

Giving up on '/root/.cpan/sources/authors/id/P/PE/PERLANCAR/Regexp-Pattern-0.2.14.tar.gz'
Note: Current database in memory was generated on Mon, 28 Feb 2022 23:41:02 GMT

cpan[2]> install Log::Log4perl
Running install for module 'Log::Log4perl'
Fetching with HTTP::Tiny:
https://cpan.org/authors/id/E/ET/ETJ/Log-Log4perl-1.54.tar.gz
HTTP::Tiny failed with an internal error: IO::Socket::SSL 1.42 must be installed for https support
Net::SSLeay 1.49 must be installed for https support

Giving up on '/root/.cpan/sources/authors/id/E/ET/ETJ/Log-Log4perl-1.54.tar.gz'
Note: Current database in memory was generated on Mon, 28 Feb 2022 23:41:02 GMT

cpan[3]> install Net::SSLeay
Running install for module 'Net::SSLeay'
Fetching with HTTP::Tiny:
https://cpan.org/authors/id/C/CH/CHRISN/Net-SSLeay-1.92.tar.gz
HTTP::Tiny failed with an internal error: IO::Socket::SSL 1.42 must be installed for https support
Net::SSLeay 1.49 must be installed for https support

Giving up on '/root/.cpan/sources/authors/id/C/CH/CHRISN/Net-SSLeay-1.92.tar.gz'
Note: Current database in memory was generated on Mon, 28 Feb 2022 23:41:02 GMT

cpan[4]> 

##</code><code>##

$ openssl version -a
OpenSSL 1.1.1d  10 Sep 2019
built on: Wed Feb 23 16:50:26 2022 UTC
platform: debian-armhf
options:  bn(64,32) rc4(char) des(long) blowfish(ptr) 
compiler: gcc -fPIC -pthread -Wa,--noexecstack -Wall -D__ARM_MAX_ARCH__=7 -Wa,--noexecstack -g -O2 -fdebug-prefix-map=/build/openssl-FuVaAp/openssl-1.1.1d=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
OPENSSLDIR: "/usr/lib/ssl"
ENGINESDIR: "/usr/lib/arm-linux-gnueabihf/engines-1.1"
Seeding source: os-specific
$ which openssl
/usr/bin/openssl
$