Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l4pqj-0005oR-DN for pgsql-hackers@arkaria.postgresql.org; Wed, 27 Jan 2021 18:47:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l4pqg-0003gn-C4 for pgsql-hackers@arkaria.postgresql.org; Wed, 27 Jan 2021 18:47:26 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l4pqf-0003gX-Su for pgsql-hackers@lists.postgresql.org; Wed, 27 Jan 2021 18:47:26 +0000 Received: from mail-dm6nam11on2082.outbound.protection.outlook.com ([40.107.223.82] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l4pqc-00013p-5k for pgsql-hackers@lists.postgresql.org; Wed, 27 Jan 2021 18:47:25 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ON+ST6Ou2ucNUuCUexxjYIJ6DmsPfiHjT/jN6kPCN4DfZPfoU8bV2HwbYzMJ7EzO+0USUN5HpEMcMev1wmkMRLdE8XjRp8Ar25DSA0kihbYqoNYQU40izWgvZ4mxljNJcD/qI7ye2w/n9RpnGcYpYNzkzpn96E6pKr0UOqFG5+WEx59LN7eVY0ldzGPaLGzXFIWTFT/5g7Yhe63P/pM1HEi3J3rOO1FCNdLvY/oXIPYC6/K/AKo3a4ilIlDJIb1tbY8z0mKnccxKu1ZnFd8BEb8X69mqyu6BZ7dmzqCqxOdURipk+ge8wBY52AvlAlMAqm9pwDBrZ//JZMus0obfQg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+hbA90eplIdk5MFmCsP2Ni3KDsGQTjD5kS+GovO2W+I=; b=XsTw4e/LjjKX6PUrgxjo6gBt5JJqyNKd18hvYUpzk5K1R6NxQ3IoyreNwQXWeSrTP3c9xer7MQsG1LOYs3MdPnvN+0DlIlKT63wYWrrzTm3HMRTp/SLqZ1vijf8TH4MxJhKYbyrKWnSb98U5xTxGfh36qXmQFsljb6NldBIeAaupRquDeWfxYr6n/A9wh0lPrydJtCRpihj9btJ5HFHmZEk10ccVNNzUMyQyjh7hibKUk496q+ZSFVy2aSdyx389kWnPWMEnrVfElGBTJgqD12Zc0Wsj9r+lmmgNK77V7LGHAek2iXdsO9rWvOL3OnZJgVbhxP9G2tmhzUgqEA9Zdw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+hbA90eplIdk5MFmCsP2Ni3KDsGQTjD5kS+GovO2W+I=; b=rkqMp/hlnSJ8lcZs53Xq6ambCExpG4+IWHaXLsRy8kWapVUmLpIuqMzkssQ0r2eHixlfNhXgJw0zzR9F+zlxZX50M9kzKAbvBFkBbWKWdmvR1Nrt/eIJyksjVTYeA6at0nkehyVuAwYPNa4s8CicWtZzf5WQhy1PUnBhlJY4PEw= Received: from (2603:10b6:300:65::20) by CO6PR05MB7764.namprd05.prod.outlook.com (2603:10b6:5:34f::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.7; Wed, 27 Jan 2021 18:47:18 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3805.015; Wed, 27 Jan 2021 18:47:18 +0000 From: Jacob Champion To: "michael@paquier.xyz" CC: "daniel@yesql.se" , "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "sfrost@snowman.net" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCACmGzgIAAupyA Date: Wed, 27 Jan 2021 18:47:17 +0000 Message-ID: <14c55cc3114a9896a6c5fc16230a60fcef6c4819.camel@vmware.com> References: <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> <8D7F95DB-8F8A-4300-BFDA-656FBAB30FE2@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: paquier.xyz; dkim=none (message not signed) header.d=none;paquier.xyz; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2014f137-0228-4a4a-c58d-08d8c2f3f8e1 x-ms-traffictypediagnostic: CO6PR05MB7764: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: wdR+LSQSZHpGjdbrGXicVdOmC0iOsdth7iY+XtWuiuj17PddurTnTmfMCAyv+BvbwNlkQlpSdR6wZwKKpp6fy7BtocadK9gRdp5zdBvfGtcdAAIu9ntPaxONh7h2AVmGjePH9TOBddi1fTAYK7AF0bks83qpC4SFjM9GZxZx6kaDmCveLP+JeZkW2xjASpGxLhYKMe5S5drI5NfIDge2mDknbFURWKMdQh2oVrzEmfYZTOlsSuVLn0XN4X2hPZwxbFPqHZUNZWFsFfrxqTS3qSQ0NdlZtpriUGk1mUYQ/qhADk+vjGFO0ozF5Sp4hIfekB+ndizZ9XO9RD2no3+XoVG943rpTatCX9XtP8dXxm575WnRTApazIi6e0EigPLtFuou9qWoCc0RAq39mAnj/eQZMzzjPCYveblqBlvtV9O3QDgx+z1ycbRay4RacY8cY3RgWLvRo3MBz3EC959MLgdur/58plLmqCvgWN7AQ6FGVPO0Dm1xVAJ6diWBfv/xvHEskLHVs+KpZhEGr4IBCw== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(39860400002)(366004)(396003)(376002)(346002)(64756008)(6916009)(6512007)(5660300002)(71200400001)(6506007)(66946007)(86362001)(2906002)(478600001)(4326008)(66446008)(66556008)(316002)(26005)(8676002)(6486002)(83380400001)(66476007)(36756003)(186003)(2616005)(76116006)(54906003)(8936002);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?S080dGl2My8wODVzYmlKWXRzcWtjNndac2d4Y3Ayd2QzdDdCdHorWnl6STkz?= =?utf-8?B?OTJDZ3ZnTisvTEsycmcxdG10bU1SMWRacFVlRk5wa0MyL1RrcXZ5eE5XM1Qz?= =?utf-8?B?bUdKOWMrZWcrZlJPUmxQR1BFTXRrMDU0dXc2MFRzYlozVmxlMXlmK09NVUhq?= =?utf-8?B?TGkwV3NxWE9JQXpqcDUweGdScWNqRUNTRlhlaHdMQ1JTQkhvVERXWU93Ym4w?= =?utf-8?B?Ukg0cFRoNHNIMzFGQ1VJZGtKN2I2SzB2Mk5CMkR6V2xTZTg5TXB2ZVppU090?= =?utf-8?B?V0lxWGRUZFBsc2V4T3JZWVMrTElLMWx5NUpBa3NUUUNaZ245QkQxTmVnb1Jx?= =?utf-8?B?aUYxcVNKSy9RWWU3blNCWiszendkeWRZbC9CbkZZcURQbWpsWEw3YUQyb2JV?= =?utf-8?B?M2VlWE5xaUFlb2kyYlNuSUNCVEJtZ3hOUUZzeEhHY3lEL3VONHlnbTdMUW54?= =?utf-8?B?bjlmcWFqRXdUZkRuVUhLeW4yRzRPTE11bzhaczZwN3NDVTJGSEQ5VmFUNGM0?= =?utf-8?B?Uk95L2svVmFNclJXT1hQWmhDUXNCN2FDQ2tqVit6SGc5MTFXcG40VldYS3FE?= =?utf-8?B?a2lIVTJBaHh4UFV1NzIxRkJzUkFCc1lSMklvY0pZQTF1aHl4U1F1RzFTYm5h?= =?utf-8?B?ODhnTFVaamc4L0Q3cVROcStNSXBHYlNoNHdwQktaZ29RSUhQaUVlSWpKZE5z?= =?utf-8?B?aHp3czB2QU4raDZqWC9NUnhLZEJQcE0rZzRNNWhrMDlCcVRIM3VEeHg1Wmhy?= =?utf-8?B?Tk4zQ3dtaDRqZm9KTzBsbFVJbU10S0Q5WUNxaVR2SnQ2SExBL0phUURpUEo3?= =?utf-8?B?QmVTZ0MyclNsakJDdkhCMFlMa2R6QVNrZmZ6SXhTSjBzOXB0endHTkVDeTkw?= =?utf-8?B?SWduQ3ArUU9mYlhpS1FPNUpFMHNrZUc5Sjh1UjdpTjNBeXFoUS9vSTZnSCs2?= =?utf-8?B?Qk4zaFhuNzRJMHNTSnNPZnB4aGt4Vkl2cytRQmpsb1ViYmdSNThzenNYWURx?= =?utf-8?B?MCtDazZjcGtwLzk1TDJ0OHBHMk9DbmJNWjNYS01WWEdOUmVjbWNiSFNtMDhq?= =?utf-8?B?QmtSQmZiZk01SE1XWlVVSnVnVE1Ca0hqTTVPRWdjM2Q0dEFKTG5XTU1hdmdR?= =?utf-8?B?V3dYUWhMTUtNb3NlZU5RVU5JZ002cGNZWTl5OEYwT1RxZTRtTGJrMkh3MnRW?= =?utf-8?B?S0tBZmd0K21XKythVmlqdElDaWpFd1g1QjNwMHptNVllK2FMQWNkV21vN2Rt?= =?utf-8?B?NjFtQ2ZoRTlaa1JHaStNVURHUTBRMzhReVJmb0o1SGlnVWJUWkxNeGsreGo3?= =?utf-8?B?aC9BeUtBSEFLSEQ2RDJVaGtQNjY0QzcvbEdEdjJYWk94dG9DaHpiWjN4SHJj?= =?utf-8?B?cVJBYmhSZFFhS3JIbE01RVJtblQrUXZqWkNJay9pZktvSFhPODRQN04xQkc3?= =?utf-8?B?Vk0xa1NZTTBRWmFqR1YwRmVQVi8wNnQweXJnK3lnPT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2014f137-0228-4a4a-c58d-08d8c2f3f8e1 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jan 2021 18:47:17.9543 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mJ0iCKSnwBUxUvqV9JAhJtThmMrCuL1lNhQhiL4ZCvxmr7Kf4Fa2S7sOXqboTGorJ1xh+KOlZ2i/slowSZ6v4A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR05MB7764 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gV2VkLCAyMDIxLTAxLTI3IGF0IDE2OjM5ICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IE15IGFwb2xvZ2llcyBmb3IgY2hpbWluZyBpbi4gIEkgd2FzIGxvb2tpbmcgYXQgeW91ciBw YXRjaCBzZXQgaGVyZSwNCj4gYW5kIHdoaWxlIHJldmlld2luZyB0aGUgc3Ryb25nIHJhbmRvbSBh bmQgY3J5cHRvaGFzaCBwYXJ0cyBJIGhhdmUNCj4gZm91bmQgYSBjb3VwbGUgb2YgbWlzdGFrZXMg aW4gdGhlIC4vY29uZmlndXJlIHBhcnQuICBJIHRoaW5rIHRoYXQgdGhlDQo+IHN3aXRjaCBmcm9t IC0td2l0aC1vcGVuc3NsIHRvIC0td2l0aC1zc2w9e29wZW5zc2x9IGNvdWxkIGp1c3QgYmUgZG9u ZQ0KPiBpbmRlcGVuZGVudGx5IGFzIGEgYnVpbGRpbmcgcGllY2Ugb2YgdGhlIHJlc3QsIHRoZW4g dGhlIGZpcnN0IHBvcnRpb24NCj4gYmFzZWQgb24gTlNTIGNvdWxkIGp1c3QgYWRkIHRoZSBtaW5p bXVtIHNldCBpbiBjb25maWd1cmUuYWMuDQo+IA0KPiBQbGVhc2Ugbm90ZSB0aGF0IHRoZSBwYXRj aCBzZXQgaGFzIGJlZW4gdXNpbmcgYXV0b2NvbmYgZnJvbSBEZWJpYW4sIG9yDQo+IHNvbWV0aGlu ZyBmb3JrZWQgZnJvbSB1cHN0cmVhbS4gIFRoZXJlIHdlcmUgYWxzbyBtaXNzaW5nIHVwZGF0ZXMg aW4NCj4gc2V2ZXJhbCBwYXJ0cyBvZiB0aGUgY29kZSBiYXNlLCBhbmQgYSBsYWNrIG9mIGRvY3Mg Zm9yIHRoZSBuZXcNCj4gc3dpdGNoLiAgSSBoYXZlIHNwZW50IHRpbWUgY2hlY2tpbmcgdGhhdCB3 aXRoIC0td2l0aC1vcGVuc3NsIHRvIG1ha2UNCj4gc3VyZSB0aGF0IHRoZSBvYnNvbGV0ZSBncmFt bWFyIGlzIHN0aWxsIGNvbXBhdGlibGUsIC0td2l0aC1zc2w9b3BlbnNzbA0KPiBhbmQgYWxzbyB3 aXRob3V0IGl0Lg0KPiANCj4gVGhvdWdodHM/DQoNClNlZW1zIGdvb2QgdG8gbWUgb24gVWJ1bnR1 OyBidWlsZHMgd2l0aCBib3RoIGZsYXZvcnMuDQoNCkZyb20gcGVlcmluZyBhdCB0aGUgV2luZG93 cyBzaWRlOg0KDQo+IC0tLSBhL3NyYy90b29scy9tc3ZjL2NvbmZpZ19kZWZhdWx0LnBsDQo+ICsr KyBiL3NyYy90b29scy9tc3ZjL2NvbmZpZ19kZWZhdWx0LnBsDQo+IEBAIC0xNiw3ICsxNiw3IEBA IG91ciAkY29uZmlnID0gew0KPiAgCXRjbCAgICAgICA9PiB1bmRlZiwgICAgIyAtLXdpdGgtdGNs PTxwYXRoPg0KPiAgCXBlcmwgICAgICA9PiB1bmRlZiwgICAgIyAtLXdpdGgtcGVybD08cGF0aD4N Cj4gIAlweXRob24gICAgPT4gdW5kZWYsICAgICMgLS13aXRoLXB5dGhvbj08cGF0aD4NCj4gLQlv cGVuc3NsICAgPT4gdW5kZWYsICAgICMgLS13aXRoLW9wZW5zc2w9PHBhdGg+DQo+ICsJb3BlbnNz bCAgID0+IHVuZGVmLCAgICAjIC0td2l0aC1zc2w9b3BlbnNzbCB3aXRoIDxwYXRoPg0KPiAgCXV1 aWQgICAgICA9PiB1bmRlZiwgICAgIyAtLXdpdGgtdXVpZD08cGF0aD4NCj4gIAl4bWwgICAgICAg PT4gdW5kZWYsICAgICMgLS13aXRoLWxpYnhtbD08cGF0aD4NCj4gIAl4c2x0ICAgICAgPT4gdW5k ZWYsICAgICMgLS13aXRoLWxpYnhzbHQ9PHBhdGg+DQoNClNvIHRvIGNoZWNrIHVuZGVyc3RhbmRp bmc6IHRoZSBgb3BlbnNzbGAgY29uZmlnIHZhcmlhYmxlIGlzIHN0aWxsIGFsaXZlDQpmb3IgTVNW QyBidWlsZHM7IGl0IGp1c3QgdHVybnMgdGhhdCBpbnRvIGAtLXdpdGgtc3NsPW9wZW5zc2xgIGlu IHRoZQ0KZmFrZSBDT05GSUdVUkVfQVJHUz8NCg0KPGJpa2VzaGVkIGNvbG9yPSJsaWdodGJsdWUi Pg0KDQpTaW5jZSBTU0wgaXMgYW4gb2Jzb2xldGUgdGVybSwgYW5kIHRoZSBjaG9pY2Ugb2YgT3Bl blNTTCB2cyBOU1MgdnMNCltub3RoaW5nXSBhZmZlY3RzIHNlcnZlciBvcGVyYXRpb24gKHN1Y2gg YXMgY3J5cHRvaGFzaCkgcmVnYXJkbGVzcyBvZg0Kd2hldGhlciBvciBub3QgY29ubmVjdGlvbi1s ZXZlbCBUTFMgaXMgYWN0dWFsbHkgdXNlZCwgd2hhdCB3b3VsZCB5b3UNCmFsbCB0aGluayBhYm91 dCBuYW1pbmcgdGhpcyBvcHRpb24gLS13aXRoLWNyeXB0bz8gSS5lLg0KDQogICAgLS13aXRoLWNy eXB0bz1vcGVuc3NsDQogICAgLS13aXRoLWNyeXB0bz1uc3MNCg0KPC9iaWtlc2hlZD4NCg0KLS1K YWNvYg0K