Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1naJ8i-0000MP-6n for pgsql-hackers@arkaria.postgresql.org; Fri, 01 Apr 2022 15:24:40 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1naJ8h-00022Q-1S for pgsql-hackers@arkaria.postgresql.org; Fri, 01 Apr 2022 15:24:39 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1naJ8g-00022H-Fg for pgsql-hackers@lists.postgresql.org; Fri, 01 Apr 2022 15:24:38 +0000 Received: from mail-dm6nam12on2049.outbound.protection.outlook.com ([40.107.243.49] helo=NAM12-DM6-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1naJ8d-0001tX-8L for pgsql-hackers@postgresql.org; Fri, 01 Apr 2022 15:24:37 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QRHoI8OWqov1KFPLy2mjMs7OtgPSo8aCSev7RK75mthzYlltouJDVJyIyrW4n4yrmLqmR2i2WHyD1ChDob2W6TcqlDrFElP6Pm+DsYik4e8+z0zjx65PA7ThQC0hBHAXw4pqz+WtEOGiyBHtzjFCGcwcdnBEAjTHyqeO/lhNfXfGyIIZC1784z7QQCLWWflklb/tm4R4f6TeslKObMZVJtQE7DEBh4rBbFy3B8yetvrG4iyxLL4xPzvrq+j3aaI98Cv0SGViLTh7V+BBQPryxrkGdcegSz98o7Ern6BNe4ugSXyervGKdcjLEvePToBEk+r6JniYyYb/Z//cSJOnQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=kdvwEmKZ2iWBYfrUaw0kuDerkw4HDMnjV44DiFv2HCI=; b=nGE+dC5/CghPtxAxPmmnO5XAFhiakvQ3BUO0xw+UgWnFA5v8ql6Yk1O7IYP8CE8Hh0y/ZiugbWQnGbVS1HRDwoB/x3QxkgMRgHm45cI/sLVJsB3H+woACQfEC8usxSqKSqX1bKLQS9pY8/nbGY1xqQEn+oDt+7sCTffqLgqfHZMAGAVwqgrK5YhryHBeyITqfUje28HJY+LWmN/MqY8fxv+iPGUajdkqB+tS21W1NVBTZp8FBihFF/VwofnyPCr68qMgqCl0FSuVT3bV9wY0UbV7Qt8UXWPc6rXWbiBv1LxYbUG9Hpy9b0uqxaG+X7Wx0YQq0xSl0g3DDY/ybZegKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kdvwEmKZ2iWBYfrUaw0kuDerkw4HDMnjV44DiFv2HCI=; b=s4BR+qW0r7QJSxfTVUHcuJz9syjKKwnfwAuzMvBrXOZCdyaVDziUH7HqHReS8QOnEgHP6466VL5sh4fQMM5clLDgDTKCNnb598ycG/QJJiWU9aOfbVALddM7M6KVe9LKtausCXay4J1kYRBIXQIesbf+yn3LluGUgV0bdLI48M0= Received: from CO1PR05MB8087.namprd05.prod.outlook.com (2603:10b6:303:db::16) by CO1PR05MB8379.namprd05.prod.outlook.com (2603:10b6:303:e2::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5123.25; Fri, 1 Apr 2022 15:24:30 +0000 Received: from CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::318f:4d91:823:8e1a]) by CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::318f:4d91:823:8e1a%8]) with mapi id 15.20.5123.025; Fri, 1 Apr 2022 15:24:30 +0000 From: Jacob Champion To: "daniel@yesql.se" , "peter.eisentraut@enterprisedb.com" , "tgl@sss.pgh.pa.us" CC: "stark@mit.edu" , "pgsql-hackers@postgresql.org" , "horikyota.ntt@gmail.com" Subject: Re: [PATCH] Accept IP addresses in server certificate SANs Thread-Topic: [PATCH] Accept IP addresses in server certificate SANs Thread-Index: AQHX8hoz9DTsvozxTE2eDKi/5mA03aw0noUAgADXTYCAAMfZAIAAFMUAgBtEogCAA6YZAIAn2AyAgAPhpACAAMK2AIACNW8AgAQmkoCAAqTtAIAJyJIAgAPgf4CAJpI3AIACkPYAgACa2gCAARs+AIABckkAgACjIYCABhUaAIABDywAgACQmICAATaugIAGHq6AgAAXqICAALDxgIAAuXuAgAKSU4CAAE4pAIABdQyAgAA+SwCAAU0WAIAAFX6A Date: Fri, 1 Apr 2022 15:24:30 +0000 Message-ID: <0cd699874f24c9a4846c57eb5b611e77255d581c.camel@vmware.com> References: <20220318.163857.1357392368287571138.horikyota.ntt@gmail.com> <20220322.133202.1699013732440256188.horikyota.ntt@gmail.com> <5878cc4f261dfac70999be7c10d80e898449e388.camel@vmware.com> <20220323.142007.1816604521514641243.horikyota.ntt@gmail.com> <2da38935f528904f62dd5846767dc53585d8a309.camel@vmware.com> <552429.1648415967@sss.pgh.pa.us> <3F1A8748-DEF8-454C-B7ED-F536CCF7F115@yesql.se> <5EA8D400-9705-463C-B30F-E7A78EE5C8FB@yesql.se> <27dd89aa5bd8fac8fdfdbd33dd460422bcb77d6b.camel@vmware.com> <26dd7e4b482832323e38ba6f08e3651b5c2c5817.camel@vmware.com> <658f846c-04e0-9391-9ae8-fd698c32637f@enterprisedb.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0cb82679-d7d3-4d7f-c4a6-08da13f3b7b6 x-ms-traffictypediagnostic: CO1PR05MB8379:EE_ x-ms-exchange-atpmessageproperties: SA|SL x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR05MB8087.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(4636009)(366004)(36756003)(86362001)(6512007)(508600001)(122000001)(38100700002)(8936002)(5660300002)(38070700005)(4744005)(6506007)(110136005)(2906002)(2616005)(186003)(316002)(54906003)(71200400001)(6486002)(64756008)(66446008)(66476007)(66556008)(66946007)(76116006)(4326008)(8676002)(26005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?U1FYcUc2TkN1RkRJR1B4NDQvcFJUTjZ4TitncVoyZWhoN21qOXlCa0lsemZ2?= =?utf-8?B?a3RoL1RVWVJMS3hYZ250eTNsUzlxeWx4RHo3MDY3SzFlcEJTWkZETUtlcFBX?= =?utf-8?B?OEY5UzJ0UzY1Rngrc0hCWjY1dXJqeGNING5rdk5yV1pTTFNGUDRKbG93WjR5?= =?utf-8?B?M3RGTW1mWWd4QXVWSnJDVXIrWGhCekdvL1VFSGpFZTY1LzhyaFlPNVNKcWxC?= =?utf-8?B?R2h3SGo3K0owMjhRSUo2WGp2UGsyaGt1VHBCNFg5OTMvZkFwQlVva3YxTUlX?= =?utf-8?B?eC9LbzJvVkNNMUJXM2YxQXhWbTJ5YXhzYTlXenZnekc1ZFVzSmtDWk9wVVdN?= =?utf-8?B?SFNXZms5RWpFVWdZSzM0aSt1aVJGR0htTFU0djJHSXIrWnFVNWROb29CRlQ0?= =?utf-8?B?WnVMRlZMb1JHNGpuRjAvUThEeGo3bktQVCtnVEVwOFRNaXh0SWRIU3ZLVytx?= =?utf-8?B?N2gvNzZaTE5sSy9wcnRnVThIZlRCcFMvTjhMTmE0aFNtckowQmlIUmY5R1Jq?= =?utf-8?B?SHlaejhqRFdhQnA4ZXgxSElSbTJCSkxMOGxlWnNZbU1Rdm80Rzl3MWJqeHNL?= =?utf-8?B?Y1NVZHEvd0xWZXpCRzhpRWVNWDlPMDYzbHJwQnIxWWJ2NnZmOTVzNTZJYUtP?= =?utf-8?B?WERJa0M5bDZNZGpFNlV1OTRUN1RCK3gvaVU3SkNnU0hmY0FyM20rakg0MmF5?= =?utf-8?B?T1d1cDlIWjV3Vkt1SndjNWFtTmZBeTZJWDlnNmhzbXZpZWdhREEyOUNiMFpN?= =?utf-8?B?QlNKN2NMSitFbm5sSFJzeXVQZW5ad2pmQXZ2NlE5VHFBWFJsZkp3M1RSR3I0?= =?utf-8?B?b01JaEtZZDFFMHdRT1lXRFFtc2N2V3cyUXd3Q1hkY2E5aHRMSWxiM3JEMjFT?= =?utf-8?B?b3BjS0g3dkxwRFNrWFM5cjBQNXNXSDlPd2ZtT3h4L1JVRHdETjBvM3BveGpW?= =?utf-8?B?NlJHSlBJMnk1cEsya29hRVN3QVdEOWp5QS9XMWVYNzJmV0lvV1ZMMGNsc0ZU?= =?utf-8?B?V0JZVEs3SGNzSWFIR2hqSm04U1pab1kvdGlYbUUrdjZheWhXZXc2M1pRWW1M?= =?utf-8?B?bS8rSjFIRXcyeVRHblVGdkhFdGFUU3dpVlFaNmtraWFKN2h5U24rQWdLbmdt?= =?utf-8?B?VUV4LzA5eVNPU3dUdS80TmkwbloyZzVGTTZhNEkwUVF1OVBaR0g4S0RhdDAz?= =?utf-8?B?QXF3RnBnUjh6TWYwZEwxYlhneWxUSDMwL0xMSmFyMitXYVVKWXRMVXMwRXoy?= =?utf-8?B?MWhGbllFUWViamdaQ0podjJMUmJzQVBVSlJ3U0pSME5rYVVpclBoU1REaWhp?= =?utf-8?B?Z2NqRVdTTzl3RmwwOER0MjVVQUN3aXN6RUt6dEVnNHVqWFJlMFhES3lWeS9T?= =?utf-8?B?Z2pnQUMvRmF3OTJ1dUVDYjJNM2pzNjlEa2h3ZGVKNnVtM2ZUZER2MFFIU3hD?= =?utf-8?B?R2NYY28xMjZzMWk0bDR2UGVFUlJ4RGZVNk1OQm9Wejh2dGFER1dWbWpFY0t4?= =?utf-8?B?NkRTZTZPWGtXMnpub3N5TFU5Zk5zbjNnVEpvVk93dnRGcjVwV2gwUWJqa1BW?= =?utf-8?B?a284UG9XNDRXQm1OUGo4enhJN09IY2ltSmtRTkJBc2MzOTdtampVRFBXUnVm?= =?utf-8?B?TVFXY09kWWo2cU9MczFtb1ZMTWVLVFFvS0RDNTBHazF2SnNGM050UVcrTkQ3?= =?utf-8?B?VW8wYzZjZXg2eVhjOXBGdTB6UWlpdEcxSVF0cjd4dUFjVDhyMTI2ZW15MWt1?= =?utf-8?B?Skp3elFoVFRtSXVFbXlIQWkvRCtta29KNngrMjYvWDdyeXBhaEMvS1BaZGNM?= =?utf-8?B?N2Z2ZW5HbEU4N2RTWUFmb0hhcU9HQ1ZDcUpLV21uNEc4QjEreHVPZG5XRDZZ?= =?utf-8?B?SHp6QWUrd1duZE9tWkhuRXBlbnF5c3hvV1NBM1h6QXVFT0N1M05aMitFd1Np?= =?utf-8?B?anYrMnc0RXpVK2Z1SVZTUk92M2hiaUxmaXphRjlrQ05HN0dRUU96bTVHMU1X?= =?utf-8?B?NWU4OTRzcE1Ob3VHdzdTd09WMnEyaXlnenRrUnRpK3oxOTdLSTVYVDQveTRv?= =?utf-8?B?bnJCbE1MeGJSUytucGJzZGF3Yk44SE9uUFdxVFV2UUlaTjZBR0NyM04yajZK?= =?utf-8?B?cXNJaG1GSUtsc2NsMjhaVFRTaHM2UXpoMXpPbHpyQk9vWndLc2s1Mi8vaWNX?= =?utf-8?B?Y2JqNUhXZkFxRHRkSDg3V2MrRmdyTWJnYjVERFhGNWNycGlZQU0xYXQ5UWQ2?= =?utf-8?B?MUl4Y1QyZ2NhU0ZjYmtxOEFWRWVhYnpsaXpuVklrZ2RHcGJoTGRJVFJ0aDFW?= =?utf-8?B?UEhwbmxWMFowYnRuWjNYRmlxdllJUVdsdVlBSUxvdFdNM0NnTi9qbElDdGpK?= =?utf-8?Q?OXSfr0xOSw7X5R00=3D?= Content-Type: text/plain; charset="utf-8" Content-ID: <5E3D8C09B19CFE4BAF064A01B81727E9@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CO1PR05MB8087.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0cb82679-d7d3-4d7f-c4a6-08da13f3b7b6 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Apr 2022 15:24:30.5598 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jjYlumIguc6mOWmaoFEsenL/Opjh8opksn451t9RFQD3Ll49Z1ZmPzfYM6V9C3OoaA993Ml/TYBQATfUC3PKAg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8379 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gRnJpLCAyMDIyLTA0LTAxIGF0IDE2OjA3ICswMjAwLCBQZXRlciBFaXNlbnRyYXV0IHdyb3Rl Og0KPiBJIGhhdmUgY29tbWl0dGVkIHRoaXMuDQo+IA0KPiBJIGhhdmUgcmVtb3ZlZCB0aGUgaW5l dCBoZWFkZXIgcmVmYWN0b3JpbmcgdGhhdCB5b3UgaGFkLiAgVGhhdCB3YXNuJ3QNCj4gbmVjZXNz YXJ5LCBzaW5jZSBwZ19pbmV0X25ldF9udG9wKCkgY2FuIHVzZSB0aGUgbm9ybWFsIEFGX0lORVQq DQo+IGNvbnN0YW50cy4gIFRoZSBQR1NRTF9BRl9JTkVUKiBjb25zdGFudHMgYXJlIG9ubHkgZm9y IHRoZSBpbnRlcm5hbA0KPiBzdG9yYWdlIG9mIHRoZSBpbmV0L2NpZHIgdHlwZXMuDQo+IA0KPiBJ IGhhdmUgYWRkZWQgYSBjb25maWd1cmUgdGVzdCBmb3IgaW5ldF9wdG9uKCkuICBXZSBjYW4gY2hl Y2sgaW4gdGhlDQo+IGJ1aWxkIGZhcm0gaWYgaXQgdHVybnMgb3V0IHRvIGJlIG5lY2Vzc2FyeS4N Cg0KVGhhbmtzIQ0KDQotLUphY29iDQo=