Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lorHm-00062D-P8 for pgsql-hackers@arkaria.postgresql.org; Thu, 03 Jun 2021 17:37:38 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lorHl-0007W0-HH for pgsql-hackers@arkaria.postgresql.org; Thu, 03 Jun 2021 17:37:37 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lorHl-0007Vr-9c for pgsql-hackers@lists.postgresql.org; Thu, 03 Jun 2021 17:37:37 +0000 Received: from mail-pj1-x102d.google.com ([2607:f8b0:4864:20::102d]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1lorHf-0006DZ-67 for pgsql-hackers@lists.postgresql.org; Thu, 03 Jun 2021 17:37:36 +0000 Received: by mail-pj1-x102d.google.com with SMTP id b15-20020a17090a550fb029015dad75163dso4353956pji.0 for ; Thu, 03 Jun 2021 10:37:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=j-davis-com.20150623.gappssmtp.com; s=20150623; h=message-id:subject:from:to:cc:date:in-reply-to:references :mime-version:content-transfer-encoding; bh=VmXJCRCkUj841/sbhViHh66V2iZpGaKcxWQAFP/r9Ig=; b=gNbU6/8+9v05qITxbtMNmoG77bzNCpQFApUg4Usw2b9p/kPbW8ws5y5BKarPex5Ud6 Pn7FkPpltEBlXkY02dbEd/mkU2bDHpZM2nLWYUed+HmQaoT9kgvQCZjqWJ99VVYcfdrW 4U2pNX2o7NQoeaT5XQuP/6Gcno5jKGPfXjO3tgcR2ayXU99IkpwEVQXMDxBkSdNxvLIj ZX3+4qJO8CVwaRUbONSmdawT5/anb3dX/XctjaTobnvAE2uCBj/EAegOXvI2SUDivqLP E97bx+N7G5RSxSKbjMZIeWyYDrsjyiHsrdc6K6A67aVPwXks0RthbaJRnCZc+Wh4DIFw Qv4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:mime-version:content-transfer-encoding; bh=VmXJCRCkUj841/sbhViHh66V2iZpGaKcxWQAFP/r9Ig=; b=dEykAU3nO4hJ+GVzaDmnRyH5lljtzoy7De8N3/yNfFwNCKay8OErCIY5eyEl24eRYZ FvnxBklEOHh+RP1kv7TrSqdZ8IM6P6wgnnhOY8eV/0tN2cg4Ga7SbH7yRGMWndwJhkzS l4dEVvip4uz04P9xjVvvQCxNyHcY5zY2xG4uP8tsryn0uaiLPNB5EEChUKtnTkAlZD0b AbIB4BDaUfjHgSwuMHJj4hsbzm95LSMKS/4Rmt0ibqvqiBuozzmfiA9OHpGYf6HZfhRt ZdE/ut58xjMZNgOTwA2dYkV2X+1lx6Sqm4IZUzYAhfbJtAFge+jY/anfjn0DMk8rco19 35jg== X-Gm-Message-State: AOAM530gWex+c2d2yDs2fg222q2qsAs9QVGOrT2+K8PSqNwPFQWeD9zL kNTKeWawTHQJojvw4D6mhrGspQ== X-Google-Smtp-Source: ABdhPJywsJQVHB7n1fgRBHt9GB/Dn6k3rTICnJG6SZ1zawARvRDiww/jh7Bl3Ifa/cXdtExQLGbHdw== X-Received: by 2002:a17:902:7596:b029:f3:d01e:d316 with SMTP id j22-20020a1709027596b02900f3d01ed316mr244322pll.14.1622741848730; Thu, 03 Jun 2021 10:37:28 -0700 (PDT) Received: from jdavis.lan (c-73-231-146-4.hsd1.ca.comcast.net. [73.231.146.4]) by smtp.gmail.com with ESMTPSA id p20sm1565196pff.204.2021.06.03.10.37.27 (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Thu, 03 Jun 2021 10:37:28 -0700 (PDT) Message-ID: <1538bd8894fc723d97d5c41b9d4bb8feb9db0d43.camel@j-davis.com> Subject: Re: Support for NSS as a libpq TLS backend From: Jeff Davis To: Andres Freund , Daniel Gustafsson Cc: Postgres hackers , Michael Paquier , Andrew Dunstan , Stephen Frost , Thomas Munro Date: Thu, 03 Jun 2021 10:37:26 -0700 In-Reply-To: <20201028063957.cvln377jgao33ssu@alap3.anarazel.de> References: <20200904012334.GF19499@paquier.xyz> <20200917074134.GX2873@paquier.xyz> <20200929055939.GF7117@paquier.xyz> <411593A7-E037-474D-BFD7-D3D6683C1D46@yesql.se> <20201020191529.5yverw3ybaube3pg@alap3.anarazel.de> <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> <20201028063957.cvln377jgao33ssu@alap3.anarazel.de> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.2 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, 2020-10-27 at 23:39 -0700, Andres Freund wrote: > Maybe we should just have --with-ssl={openssl,nss}? That'd avoid > needing > to check for errors. [ apologies for the late reply ] Would it be more proper to call it --with-tls={openssl,nss} ? Regards, Jeff Davis