Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jvpjV-0006Tb-TZ for pgsql-hackers@arkaria.postgresql.org; Wed, 15 Jul 2020 22:18:33 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jvpjU-0004JC-RF for pgsql-hackers@arkaria.postgresql.org; Wed, 15 Jul 2020 22:18:32 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jvpjU-0004J3-KO for pgsql-hackers@lists.postgresql.org; Wed, 15 Jul 2020 22:18:32 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jvpjS-0007cF-58 for pgsql-hackers@lists.postgresql.org; Wed, 15 Jul 2020 22:18:31 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id 3C5932E889CD for ; Thu, 16 Jul 2020 00:18:27 +0200 (CEST) Received: from s498.loopia.se (unknown [172.22.191.6]) by s807.loopia.se (Postfix) with ESMTP id 1DE472E2997F; Thu, 16 Jul 2020 00:18:27 +0200 (CEST) Received: from s473.loopia.se (unknown [172.22.191.5]) by s498.loopia.se (Postfix) with ESMTP id 1A9824708E5; Thu, 16 Jul 2020 00:18:27 +0200 (CEST) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1 X-Spam-Level: X-Spam-Status: No, score=-1 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1] autolearn=disabled Received: from s630.loopia.se ([172.22.191.5]) by s473.loopia.se (s473.loopia.se [172.22.190.13]) (amavisd-new, port 10024) with LMTP id oIU4aKJWctrq; Thu, 16 Jul 2020 00:18:26 +0200 (CEST) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.193 Received: from [192.168.72.43] (customer-89-255-232-193.stosn.net [89.255.232.193]) (Authenticated sender: daniel@yesql.se) by s630.loopia.se (Postfix) with ESMTPSA id 9B0BB13ABE4F; Thu, 16 Jul 2020 00:18:26 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Subject: Re: Support for NSS as a libpq TLS backend From: Daniel Gustafsson In-Reply-To: Date: Thu, 16 Jul 2020 00:18:26 +0200 Cc: Postgres hackers , Stephen Frost Content-Transfer-Encoding: quoted-printable Message-Id: <08B1D888-6151-4002-B0C2-488893AB51B2@yesql.se> References: To: Andrew Dunstan X-Mailer: Apple Mail (2.3445.104.14) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk > On 15 Jul 2020, at 20:35, Andrew Dunstan = wrote: >=20 > On 5/15/20 4:46 PM, Daniel Gustafsson wrote: >>=20 >> My plan is to keep hacking at this to have it reviewable for the 14 = cycle, so >> if anyone has an interest in NSS, then I would love to hear feedback = on how it >> works (and doesn't work). >=20 > I'll be happy to help, particularly with Windows support and with some > of the callback stuff I've had a hand in. That would be fantastic, thanks! The password callback handling is = still a TODO so feel free to take a stab at that since you have a lot of context = on there. For Windows, I've include USE_NSS in Solution.pm as Thomas pointed out = in this thread, but that was done blind as I've done no testing on Windows yet. cheers ./daniel=