Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kcafc-0003ST-Hg for pgsql-hackers@arkaria.postgresql.org; Tue, 10 Nov 2020 20:55:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kcafb-0007Gf-Gq for pgsql-hackers@arkaria.postgresql.org; Tue, 10 Nov 2020 20:55:15 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kcZzD-0004mH-KT for pgsql-hackers@lists.postgresql.org; Tue, 10 Nov 2020 20:11:27 +0000 Received: from mail-mw2nam12on2050.outbound.protection.outlook.com ([40.107.244.50] helo=NAM12-MW2-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kcZz9-0001Ft-QW for pgsql-hackers@lists.postgresql.org; Tue, 10 Nov 2020 20:11:27 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mJ1Ks4FqTcInXQ/B/nI1heaEDjvtFs8TR3Eq5Jrn7h1hZ9vxLkJ0P7PnGwU+HFN0+0mgCPL1eMsZdl0QHN9D9H5vErnOlBqmM2/y2VT5rBxWw7AF1iCNac3plxSCqiroqm6z7uXv8/bI3thOWjpXNAT0BBEaZ+RjySAhLQ1c6pdP2hD4U8wRo6k1Y/8EZySrUdAyITQSxgH2LYVMLaak3Ruq1ZwxNLLlMeB9iZjml3sRFByg9I1ex7XkfzHkIwDxnNHnesXi0bhM6JUvHMPNG2pgWXu7gBbwXhW96N+XpRraDnTaOA7rXCsdhCk3mCC+sXOM8QE+GvnSGMaLOFvVOg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3ieSIQff7Ee8+H//pIoDxTC5w0mmxuzYi0odxf/dqWo=; b=CBqkXSHYHvYIb4zT7M6NzC5Vsj5Ka/ftJcGfEewaEkVP7mlqVp5EJBOzLM8ZFmk36xAEqpOjFjItLRXvDUdFU8dhrnjbQqSOIyCtxFhDLeA+tMe+76jOrRcDfmZRJNxAnNm7UY9EE1XacHk69InTmBHy1wj1eNRSZMi5bz3+4uTFjz9AtngCmVicvxV7Pjx9aB7mqZojQymwgnPwHU7d0qT82UGeo5C651BA1pTngJvKwQbNSjj9ISSMvMIinGvQPiOjfoI1JP00FnI0ouzcPW5pZyaqOWiqaB9tAfMWPSw+SFaAG1F5HF9pc0ZHaGYMz1UXOoV35WDp73N5dDGDzg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3ieSIQff7Ee8+H//pIoDxTC5w0mmxuzYi0odxf/dqWo=; b=il9MHRfWyxI05ylP0lXTGFs9JCZBwfqO2kk+tz4ZwDbVPffkiQoi+qR+Rk+aCiBJHGQu8ZADnfMVBaVJYtMHvcq/zqV219Rtpglql+IUdG72kwJhp/37P8HwQtugG5n5GgQKK4pfut/Qoq8gnqlReZGbXe7RvQbG6kdkcKcpIAc= Received: from MWHPR05MB2957.namprd05.prod.outlook.com (2603:10b6:300:60::11) by MWHPR05MB3264.namprd05.prod.outlook.com (2603:10b6:300:b4::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3564.13; Tue, 10 Nov 2020 20:11:19 +0000 Received: from MWHPR05MB2957.namprd05.prod.outlook.com ([fe80::e1c8:9250:a1ac:64c6]) by MWHPR05MB2957.namprd05.prod.outlook.com ([fe80::e1c8:9250:a1ac:64c6%7]) with mapi id 15.20.3564.021; Tue, 10 Nov 2020 20:11:19 +0000 From: Jacob Champion To: Daniel Gustafsson CC: Heikki Linnakangas , Andres Freund , Postgres hackers , Michael Paquier , Andrew Dunstan , Stephen Frost , Thomas Munro Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoA= Date: Tue, 10 Nov 2020 20:11:19 +0000 Message-ID: <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> References: <20200904012334.GF19499@paquier.xyz> <20200917074134.GX2873@paquier.xyz> <20200929055939.GF7117@paquier.xyz> <411593A7-E037-474D-BFD7-D3D6683C1D46@yesql.se> <20201020191529.5yverw3ybaube3pg@alap3.anarazel.de> <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> <7ed636a0-872c-3ea7-dc44-b35dd515bb87@iki.fi> <02260088-E0C9-49A2-ACD3-CE51D65A84E3@yesql.se> <0E64F3CB-4731-4FA8-82D8-D8590086654C@vmware.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.104.17) authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6a8a631b-d1fd-4fb0-4e26-08d885b4c9b3 x-ms-traffictypediagnostic: MWHPR05MB3264: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Gb8UnPsys/8FMrGfWRELNNuaxLg1eEekJQsyrQIha8o28hg8ptb0g51yQUrxi60+O2zdNq27K0JvUZDbkIMHmY1JZeyVDpPAp1zFXbWqRdWTkhHaqJP3p7cUA8FrDHW8mzpM6DPoTd6L9FRY5nna//nLf37ByUw4Gfq36vbLclrh1IM2FJ3lckSyCqMTtw37L7EDU04ZnujmwViLcl8KMKpHQxI/D5GCJHOL6DOk4PZoTc2hCKP9HTovH5WYYQaTdyvrPJUzq8sXu1HZpEr2Jvw5si6zaiYkhxTzlLFo0gRWTFcaQknQ+IUVHbYskWDGfSwctUHhRP6siQg4z0Vd1ITbR50aN6mWzQ9Gl+kjF/b4BXMW8YkCnDBj7NDKfiXWjxIEwTHvJG5p7JzVdIcB+w== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2957.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(136003)(396003)(39860400002)(346002)(376002)(83380400001)(2616005)(6486002)(66476007)(64756008)(53546011)(36756003)(71200400001)(6506007)(26005)(8936002)(91956017)(4326008)(6916009)(66446008)(76116006)(66556008)(66946007)(2906002)(33656002)(86362001)(5660300002)(8676002)(186003)(478600001)(966005)(316002)(4744005)(54906003)(6512007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: ZKpMyqZvyoaMPgsiyIMpcyt7eeUf5bZw8nb2XX6IEON9IfiKaNVRqfXi4bs17WUUuzVuogdmTL4hFmCDrmWqcSFNkw859AsECVZdBfz/CGiPidGJ8r3u07IIakAX4Yepr7uoN4tky8CBQbZ4Wctgu+9UEb60ACreT6SiqOgg/s4ZU3loZC5/gH5A8matkM9gQ5u7Cq1fw1AAuRmguXsUwrsNVNRLsjR0swVFqnObYtd3wZubGewZ0g8xHflrWyRJc4NrBHkcjSRykqx43k3ABcQdl2v1Rej2CekB91RX6mtmqeHykH7xC7j6JFQH7/8624BLqd7wTYQyTLaiPTJNS2wxtzuHZbkm/576MPZy2YL/pMloqCfeLd4Qb5tufTjI0c8v/qUIgJe2Xu96WOJmg7KojeszD3hVsdm2VJfOVI++7tc8dzxLCmXbrEpoyL+PSLcLcf8cveQB6fqIk4B86qu00oJm/QaJ4ZbQslTAHlu99h6sBSf0VQ3uFmFuqm3W9S8By9jH7K2/UMAkqq7m/GsYUzeGTYf2n9SPJZQRY/ecYFhpaJEqBWFXZFvqoK81dqGRhyYRA9LI+cN5lcYjmxRqgNIj2Im2XjOEg1awgWTySqIZ9betTkOnZK11R1vni7E5pN9tVUQyKfE3VRZvfqEmET4OahAfmor2AJXqXcRkhtFbGyWz0ZM6hIllKcxrUpMe88X/9XTgehDbQlJiVVeJ5r6nHr5z9IoZmHAKRL72k7S8Xbwlqtw4QYeVK3AiPImUixNhzvmzZQ4ktpJo8ZdPfZ7rVcxuTAUWNQvFKvWmnmmLRZOZZdQMdFBT0dTxJFbGVBp8+Obro7VMX9+04jDTnWUEJaP3rtxnHFr0fP3s7XjK/7LMDOzmpohbhO2CKh2jPEB6o1pEQd/eGUjOgQ== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2957.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6a8a631b-d1fd-4fb0-4e26-08d885b4c9b3 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2020 20:11:19.6084 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6N6wfliYuyg7ihVvHVrvTrTk9JcQElZ+wpxjPaY/A6MK3o2+HFJofY2dVUCnTi6/+nBFmaOmU0DvW72oQdCY0Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3264 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Nov 6, 2020, at 3:11 PM, Daniel Gustafsson wrote: >=20 > The attached switches to SSL_ConfigServerSessionIDCacheWithOpt > with which one can explicitly make the cache non-shared, which in turn ba= cks > the mutexes with NSPR locks rather than the missing sem_init. Can you te= st > this version and see if that makes it work? Yep, I get much farther through the tests with that patch. I'm currently diving into another assertion failure during socket disconnection: Assertion failure: fd->secret =3D=3D NULL, at prlayer.c:45 cURL has some ominously vague references to this [1], though I'm not sure that we should work around it in the same way without knowing what the cause is... --Jacob [1] https://github.com/curl/curl/blob/4d2f800/lib/vtls/nss.c#L1266