diff --git a/debian/changelog b/debian/changelog
index f90fedf..be70a48 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,7 @@ pgloader (3.6.3-1) unstable; urgency=medium
 
   * New upstream version.
   * Remove cl-pgloader, deprecated upstream.
+  * debian/tests/ssl: Force md5 auth if cl-postmodern is too old.
 
  -- Christoph Berg <myon@debian.org>  Tue, 21 Dec 2021 10:09:53 +0100
 
diff --git a/debian/tests/control b/debian/tests/control
index 707e2fd..13d85d7 100644
--- a/debian/tests/control
+++ b/debian/tests/control
@@ -1,3 +1,3 @@
-Depends: pgloader, ca-certificates, postgresql
+Depends: pgloader, ca-certificates, cl-postmodern, postgresql
 Tests: ssl
 Restrictions: allow-stderr, needs-root
diff --git a/debian/tests/ssl b/debian/tests/ssl
index cf5daa4..46bf086 100755
--- a/debian/tests/ssl
+++ b/debian/tests/ssl
@@ -4,9 +4,15 @@
 
 set -eux
 
-trap "rm -rf /tmp/pgloader" 0 2 3 15
+trap "rm -rf /tmp/pgloader" EXIT
 
-pg_virtualenv <<-'EOF'
+# check if cl-postmodern is new enough to support scram-sha-256
+postmodern=$(dpkg-query --show --showformat='${Version}' cl-postmodern)
+if dpkg --compare-versions "$postmodern" lt 20200101; then
+  AUTH="-i--auth-local=trust -i--auth-host=md5"
+fi
+
+pg_virtualenv ${AUTH:-} <<-'EOF'
 	set -eux
 
 	# force SSL connection