Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP5qa-00008z-61 for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 15:55:04 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lP5qY-0001qp-VC for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 15:55:02 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP5qY-0001qT-E1 for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 15:55:02 +0000 Received: from mail-eopbgr770079.outbound.protection.outlook.com ([40.107.77.79] helo=NAM02-SN1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP5qU-0006v6-Vp for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 15:55:01 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H2Zj41hsuxi4y1eXXSUiEZdBMt84Lg7nnJhVtJ/3MV/QSCCtW8jNhA+cBIpaMTiJjI8ss7Ty/B5ZW60qyhSZ61BB/MO8OdV/fbluq5Cm0i+wfieOVeC4Jxh3ThfHV8W30NlSyJ4cdCU/QpGp0vV9cu0iaEjmbjpKOo6rJPpCYDbNwqoZTWqzCBXcEiJbHtj0T3bzvSkfy3Vedjrhw8BF8XNgbq9+rdcQNea4s3hje0gSC4hMp+j8KjTWHtAl3+SuXzZriRJWNp2iWsyptC2mi2gqbitetagcuyWaAyv3Wi/fF7/7fW4EmkBB9ocjOjs3OJMidvgjEwuv6kqx7O+0GA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NWzUB6lsqB46PkchE+f+PzmuVyo61CTANx6+uCyIFnQ=; b=KhOu3AO67GFb7kbstlkHocoTxfJVkmHyaG9v0E8wKn+Lx5UWQSRmS9aL0tVpNhEY32KGyUL9LzWGGskGrVmFhV1nptGiN1RVS3wxbEiv+1t+oX/dW3rUT3wd/V9gYAs2MAerbJCOXKg/Q5eD7S/9U6Ul0NIbK7AtyTksRRDeubn0Wuhz12WORGd9ccwTOcwxpKxfUtftbzWnT99GQpUiie6UalxeO4XPTfvr2poSmXYvSGusdOtSpWYgQ4qPazp8fwQBL1SYqgsyNHrKOjRguZn/OPutDe2xaVgo1VdjZjlF67fvmhmjTxsra69OzKUA6WSeVhoiqKNZ/CL2aOzPSg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NWzUB6lsqB46PkchE+f+PzmuVyo61CTANx6+uCyIFnQ=; b=q8QnmBPaUwvZRMJIyNvZccUjKI8IgPcS8l3KPD1GTm7baWGdeZtndg5/FcYaf6Q/OZ4VPXS/BvVT7bkNSGFZKXUI3DeZ8SpljTUNZw6k12jYzSCPJIP9LW9qakwubUrAuUhprEsvRWIJCLM3h5LJXJgEus6RGML08DETER8+VIY= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR05MB3664.namprd05.prod.outlook.com (2603:10b6:301:3d::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3977.15; Wed, 24 Mar 2021 15:54:54 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244%8]) with mapi id 15.20.3977.024; Wed, 24 Mar 2021 15:54:53 +0000 From: Jacob Champion To: "michael@paquier.xyz" CC: "daniel@yesql.se" , "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "sfrost@snowman.net" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEAgAXTZYCAAkVWAIAAzGsAgArFR4CAHUTDgIABj0AAgAGZzQCAAAZRAIABAusA Date: Wed, 24 Mar 2021 15:54:52 +0000 Message-ID: <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> References: <0F5CF84D-26F1-44D0-AEAE-E011D3CEC0E2@yesql.se> <686dd2b189ec04b161f71481f1f726255ee8224f.camel@vmware.com> <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: paquier.xyz; dkim=none (message not signed) header.d=none;paquier.xyz; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e9e745cf-2780-445c-9954-08d8eedd2a39 x-ms-traffictypediagnostic: MWHPR05MB3664: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(376002)(346002)(136003)(39860400002)(396003)(366004)(316002)(86362001)(8936002)(66446008)(5660300002)(6916009)(2616005)(66476007)(66556008)(8676002)(64756008)(76116006)(66946007)(2906002)(26005)(36756003)(54906003)(4744005)(186003)(71200400001)(4326008)(38100700001)(478600001)(6506007)(6486002)(6512007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?QjRkNlc0alVoUmsvUlk1NWt6WDY2OFRkYVNhdnh0TnN5TDY5cy9UMHBMK0tO?= =?utf-8?B?M3dyREgvTXpIODZGQkQ3dGdrQ293WU50ZFNSdlFUQ1U3V1FFbHVycFUrYUdi?= =?utf-8?B?RVNhTWY1b01qNmdaOHIwTTE5NnB6a1BBSXBIZVcrUm9pbmc4aVBnVXp1VHJq?= =?utf-8?B?REJ0K0JQbXlKY3hOQ3JJdXZaVGVxU1JsVmdtdlc0cGExaktpc1FNQ0pPQVRK?= =?utf-8?B?cFdWbFhkcmFHVlBKTHAxdlRTV3BKa1g1c0ZmUW5xQW9EdjNSWWp0L0l3a3Ev?= =?utf-8?B?MkpvY0Y3anFFUHZRb09QbzlxdjlQbFk1cXg2b3pOYll1MWZkcnhHa0VzWURH?= =?utf-8?B?c2crT0x5MmZwWThLSkF5dmdsY0dDS2gwREM1OXgxT3RvaWhKUFBRaHlBYk41?= =?utf-8?B?Z09jKzAwbzhVMGNZZU5QYm80TkpsQmhnMTA2MHJsZDNlaVZYbDYvUGJCNktU?= =?utf-8?B?aXZqZGFOMnhkbVgwaWFUZHN5MmNTL2hWNThGNVRqWWpvRjU5RkhHajNkWCtD?= =?utf-8?B?N1VoN1AzSGx0K3VNakpIYnBuUldHWGRIUnYwR3hYcE0rNDBwQTY5Nm9VNDZX?= =?utf-8?B?RVhPMklFV0w0aXNTdDY0QUdvMjVtaldFYjhvL0RCcGFmc0k5T0FuYmk1ZVQr?= =?utf-8?B?LzIwSEhqL1RURHZ3R1UvcHpCVXdOM0J6U0Z4d0gwUk04WkFCRjFCWGdGbCtG?= =?utf-8?B?YjdMSFlrWDFJUGRKa1ptRXRRS3RZeS8xcWRXUTdPZHZPdk51QnJJblhHQTFX?= =?utf-8?B?dEdhMVp2aFJhekpVYUVqLzNhYmQ5enUxcUdWMHVBaWpwbGxoeHNEb1k4cXBq?= =?utf-8?B?S1ZCdGo5M0NkUVZjMFBFNUJONFdLOEZrWWNEMEJ6dzFxcTFqa1VyYjZoVWVY?= =?utf-8?B?WW5GRVFpVjB5Q2Z4ZlJadVFQSytuZGszUkxHNXA1QlIyZ3k3VkVvbFZGc0kv?= =?utf-8?B?ejFCMEFSbE9YMXliUkxkZDR4NzBlL0IrNkNsWE9YQWlTcW1nUFRJZlY0cTJT?= =?utf-8?B?cVpUVEFjTldJN2Zmbm9mRzhlbCs3aisraTNLcDFRdWp2SU1uMmloeWhVYlNO?= =?utf-8?B?V2U1RzBGeGR2WE9yQ2pMQVlGQnlSWjVrcEEwUEpYSlZRa1Jua3JRQmtrMXlE?= =?utf-8?B?VGJmUHgwTURsTXNXWTRya29YU2J5YXkxa25zSm1objI2RnhEZU1FTnJsaTBL?= =?utf-8?B?ajZtbXBGSHVUQm5UNzk3cERLVXRSUTBHVlkzT0ZnaDZUNWhPVkpJQ1ZURklZ?= =?utf-8?B?TlpEbUo1RUhzUjF0OHc2RStMOG1zWXp0WHVkYzByTjJIRGxUaS96ZHZBK3JJ?= =?utf-8?B?bjZGbmUreFdEeGZJZlc4blNYS2FMbU5SclZuQUU0VkRRdlZjMWhxME1oL3Rt?= =?utf-8?B?NmROUXhEbHU4K1ZscUk1UldyUk83eHo1OGtJME5sTUV5WjRPVURLdEtCU25J?= =?utf-8?B?OVdCTEJPdmVuTzFrWlVVZWZQMFdkU3kwbXdGUGNwZ3NwWGxWYzJZZFpPNE5X?= =?utf-8?B?Ry84UTQ3RS9mL05GZWNlTlQ1blVOSkowclBtWTFGZFRqSVMxTDBudkppSmgy?= =?utf-8?B?SHJ6V01LblJqbUVnVWtzdWhrY3BjanlXS0lvQ2JZY3I3a2hLd1lQNktlRmZl?= =?utf-8?B?eWpLa0FNM0NEMHFoUjF2UEUzU3pRNHRBNzRQR2FiNGxHbHRrZ05CZW1jZjg0?= =?utf-8?B?UWk4WlNiMnB0N1p3cW5sU0VxVHJ1eGEzdHptOThWR3BIaFJ2ekdmU0grWklV?= =?utf-8?Q?HEbMHnYef6/vHbPVa7WTMlHeuqJsYYakGS4PwfS?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <768B33CF9FE20F4B8DB6FA8B7F3CB99D@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e9e745cf-2780-445c-9954-08d8eedd2a39 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Mar 2021 15:54:52.9039 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Zlax8gv2yK7zvIKWxTbw81U/6dXrj4GNrqLjB84u0FTybGgZRCLzlOUSbLX8AkAoL9c+j+koGLPXPzEfP7Plfg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3664 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gV2VkLCAyMDIxLTAzLTI0IGF0IDA5OjI4ICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IE9uIFdlZCwgTWFyIDI0LCAyMDIxIGF0IDEyOjA1OjM1QU0gKzAwMDAsIEphY29iIENoYW1w aW9uIHdyb3RlOg0KPiA+IEkgY2FuIHdvcmsgYXJvdW5kIGl0IHRlbXBvcmFyaWx5IGZvciB0aGUN Cj4gPiB0ZXN0cywgYnV0IHRoaXMgd2lsbCBiZSBhIHByb2JsZW0gaWYgYW55IGxpYnBxIGNsaWVu dHMgbG9hZCB1cCBtdWx0aXBsZQ0KPiA+IGluZGVwZW5kZW50IGRhdGFiYXNlcyBmb3IgdXNlIHdp dGggc2VwYXJhdGUgY29ubmVjdGlvbnMuIEFueW9uZSBrbm93IGlmDQo+ID4gdGhpcyBpcyBhIHN1 cHBvcnRlZCB1c2UgY2FzZSBmb3IgTlNTPw0KPiANCj4gQXJlIHlvdSByZWZlcnJpbmcgdG8gdGhl IGNhc2Ugb2YgdGhyZWFkaW5nIGhlcmU/ICBUaGlzIHNob3VsZCBiZSBhDQo+IHN1cHBvcnRlZCBj YXNlLCBhcyB0aHJlYWRzIGNyZWF0ZWQgYnkgYW4gYXBwbGljYXRpb24gdGhyb3VnaCBsaWJwcQ0K PiBjb3VsZCBwZXJmZWN0bHkgdXNlIGNvbXBsZXRlbHkgZGlmZmVyZW50IGNvbm5lY3Rpb24gc3Ry aW5ncy4NClJpZ2h0LCBidXQgdG8gY2xhcmlmeSAtLSBJIHdhcyBhc2tpbmcgaWYgKk5TUyogc3Vw cG9ydHMgbG9hZGluZyBhbmQNCnVzaW5nIHNlcGFyYXRlIGNlcnRpZmljYXRlIGRhdGFiYXNlcyBh cyBwYXJ0IG9mIGl0cyBBUEkuIEl0IHNlZW1zIGxpa2UNCnRoZSBpbnRlcm5hbHMgbWFrZSBpdCBw b3NzaWJsZSwgYnV0IEkgZG9uJ3Qgc2VlIHRoZSBwdWJsaWMgaW50ZXJmYWNlcw0KdG8gYWN0dWFs bHkgdXNlIHRob3NlIGludGVybmFscy4NCg0KLS1KYWNvYg0K