Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2l23-00061O-VU for pgsql-hackers@arkaria.postgresql.org; Fri, 22 Jan 2021 01:14:36 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l2l21-0007Mb-Ve for pgsql-hackers@arkaria.postgresql.org; Fri, 22 Jan 2021 01:14:33 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2l21-0007MU-Fn for pgsql-hackers@lists.postgresql.org; Fri, 22 Jan 2021 01:14:33 +0000 Received: from mail-eopbgr770072.outbound.protection.outlook.com ([40.107.77.72] helo=NAM02-SN1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2l1y-0005X2-2W for pgsql-hackers@lists.postgresql.org; Fri, 22 Jan 2021 01:14:32 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Md0cY2vExvQ1wDiTb9lFVZqK1mVBZRN51V1MSlJPKC3GJgi+VzDf6nemSFILsUSZigxyUR1Ks0hbkT2fQIdRM0R4r/EPSWJuDRyqbyqIj6crEYbrTxJzpIb1ukQMVtFu4QtZdTuA252EFH6bdPxabxZPqkvANyhE3hmb2wLfXqMQSnfvCeKuHo8TNxIxvS0gm0gnM+1QD07Mir4yLvC6pfLTd3tSEXa8nal1te6cDdJN96t01crBWV0ijR+E7eMroh0TXahP4SWcGu2TIYhCT3m+8ahS4QAut0UipCMsSPoT/5n14R2hGnpSlTZv/1XTY4CNjj87N8wl8qWN1P3dUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oFMa1jO55Ramvw8pdRGsUES6GUi401+WoPxq1mlXoqw=; b=R43aaxrRIuklMTgqCfGpzaEdSczJviaf45lXIVwBDK0WcCpISV+XSJ6e4DIAh7zmWKEysy3z7oJpehehOmiOARBwudjL4xG7oun9y6ubJoyB/Qm/Dx50mmimo8JjOwbp/JK5fjt3+EHZV09lmO+rVowHHTnkivw2RlloVnE2haYoI+pF502ftDcY9WGOilgP8C4rcg4YxjvVgUIhk6XIHPnH2zX82Cevm/mWMLKnv6WK2auXjGwxr4ZTiMjhQmGSjdyaOOn+8zBXgIV6Sf1bc4J3+CxzWCwgLLOwk+WFwAO9s5kTfxk6SAflpQ/+PrH7vF+s89HNGu5xowgmOT3FrA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oFMa1jO55Ramvw8pdRGsUES6GUi401+WoPxq1mlXoqw=; b=xNYb3hf2xZeQWhXcM/GfXTEQskuUR4FR1aEBo8YbhKjOjrG7/l5SAPszV/XfjuLHNGdX0gNeP3/7rvvR8KzXO9ELeB8BBCoUWwlqZwGcLKUOUL1WNNcNxu6YcD35Nylau3RDcrWUQcJ4rDkjS28YXbdTXdxesXfeqyYiGWg/fCM= Received: from (2603:10b6:300:65::20) by CO1PR05MB8103.namprd05.prod.outlook.com (2603:10b6:303:f1::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.5; Fri, 22 Jan 2021 01:14:28 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3784.010; Fri, 22 Jan 2021 01:14:27 +0000 From: Jacob Champion To: "daniel@yesql.se" , "michael@paquier.xyz" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAikkgIABTVEA Date: Fri, 22 Jan 2021 01:14:27 +0000 Message-ID: <1c61862175c867641be8285fd4feb9dba43061da.camel@vmware.com> References: <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> <5C27CF6F-5BD3-4639-AAA6-73465595B6DF@vmware.com> <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f8ba88c9-b75e-4046-8a7a-08d8be73105e x-ms-traffictypediagnostic: CO1PR05MB8103: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: +rxXkvJrg4DZSqdt2U9+MoZbNM7liePSbQCPzCS7B5cLdAw/CMYt+foB6WiG5T4biMYlAvi8f3JhTw1UcEfJlaC2m8H/y2Fjx5EgK9Rq0sNHs0WeGcS4qudpcLeHXbYaSv7Y1r3nvuvrsrAIiui1vofKipOCT7GB3PYHIAixVu2B4DYMULSO3Hp98fRo3B0dVwdwmCpczgXrPm2+QfyR9gUyIorTDallxF0vmeSbYx9lCAKTT668SgjTdXEYmXMDcDCHVxSQ1FhR8VcrReW2nZuELRU/3O3/6xm6fTElAztCpjlqDC1KE78JXSXmk2Ki6vbWzbVf4Gtq1TN7LNuWMTtsA/Sa6F6Veh8AWaEikRNzpX4Uiz6cbSMtSfhgwm5WhoJWQ9SzkUlfZmSCj0X09RUeSEXX/kYxx9LHvUwJJwk8Aqf0oj7DOUEuAA7NPeWtWQMpKgYFsX1Iftc3aty4Xw== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(136003)(376002)(346002)(39860400002)(396003)(4326008)(64756008)(6512007)(66476007)(110136005)(86362001)(66446008)(5660300002)(8676002)(6486002)(6506007)(8936002)(36756003)(966005)(186003)(66946007)(54906003)(2616005)(26005)(66556008)(478600001)(71200400001)(316002)(83380400001)(76116006)(2906002);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?NjlvOXJsQTlQYjZRSW5CWElDM3NMc2xITlovNlEwYm5GbFNsVHJ5M1QzRDBQ?= =?utf-8?B?a1BUbUlVcVdtZzhVUUNkSWYwSXRjbHVJSVovV2lTekRGTTIxMDFsY3R5SUtm?= =?utf-8?B?cFl4RUMzd3gzUWNkRDlWQkpmQmtiTFFrNkxRM3V4cFFNUWIwTndyMHFQaGg0?= =?utf-8?B?N1hTbGlwaFVhc1cwcmFDNHEzb0lTT3pyeTFQcDJ6SWxhaEV6c0RTVWVXM1BK?= =?utf-8?B?Mmd5RStiQ0hJRjY4SytqSE0xMnAvK1dvSEFKUGVzT2swdXZXUjFrM1BnMmNS?= =?utf-8?B?SmlOclRhNVI3bW50YzdDaEtJUXVJTUgwQWdhc2UwUXNPa2FjYkpVMm9LN3lu?= =?utf-8?B?dFFFMXJoWU1GS0ZVeENPV0d3RVZKUHJZMVFaemVBU2g0U1hLakNuazRENnoz?= =?utf-8?B?cXcybWcrdE91Rld5MGpjVGtkeVVYc25POGJTeWZJZmI3NlAva0xYMERBR2hr?= =?utf-8?B?cUttMGdrREVjb1NiQ0UvV2RFRGhSY0taVVFhZDBVdGZzU0Yyb0VxVEN6REVF?= =?utf-8?B?aHg0WnVoZVJYMFBleEMvRHhSZGtGZm1NbFR2eHZiakJCdHpiVkQ2SU9QV09R?= =?utf-8?B?ZGdvRFZlaGc3Vyt6YUtYSzd3YS9MeHhSdEhyZ29vdEZPVkttN3RHVUZMaW8x?= =?utf-8?B?ZWkwU2p5bi9BQzRCaEhHd3RtM1BPSkM5SEpVeDlSQ3lHdG1tVVBwSGlyRWl3?= =?utf-8?B?ZDBjamFXWVh6d21YSzkxeHJIUmdEUlYzZklORGlJY0VzUTdQa0xWVFhRaUdN?= =?utf-8?B?WkZqQTVzS0JEMW9KMVFndkg1S2dOY0NRTTN6bkFiL2t5aTRUSE5TT1djQ09D?= =?utf-8?B?ODBoU0JHTTdJdFV3dWpST3JINUUvdEcrTGRwQ0FNelJCRUtEUUVpWWVzYi9D?= =?utf-8?B?NnFscGhTTzlGZElRSDZ2cTdTaVdVOEdLWDNMYVV5Mld0Tm1qK3dKVElDck8z?= =?utf-8?B?OEErd0pRQkdVMTVnMkVHMzdUb0lIZVZxTmJnUHlDdUMyTUFSazlJUWFyR1ZK?= =?utf-8?B?UjJDejEraUtIRVQ4a29DZ2hwdmw4c0pOVFVPVFpqMFRoU0dNMXVzVXQraHlD?= =?utf-8?B?TitreDNhUFlqTHpMN3p0enpXQ29IbElmYkkzRFk5VDU2TXlqdWk1TG1aTTFn?= =?utf-8?B?eXZpNC91Q3EzYm1IZHBuWkhnejhlQitvMzdSR0ttTi8rb0Z1SklSa29jTTBY?= =?utf-8?B?eU5Wd2Rpd0RqZnBScjl6dS8wOHpsY1hmMmk4MDZteVAxV1Q3VzFIMTFQZVY2?= =?utf-8?B?cVVtSEoyS0J3L2xzSllvTjI3d1VHakhJdnQrQXhrdmZ1QW9VWXo2NjNtOUVN?= =?utf-8?Q?Tw1YG/R1M4MPmeJ2a4CyVDlpAn1cL55CZF?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <4CF8B1E11C45634EB47D7547CE0945C1@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f8ba88c9-b75e-4046-8a7a-08d8be73105e X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2021 01:14:27.6683 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: iSayiTfWrg/B3Biqira+nkZVpYL1tZhh4EvE6/9gVem5WT34UAmurQtKgQztCur84hu3eg3V7TwEDy0GgkNsyg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8103 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gVGh1LCAyMDIxLTAxLTIxIGF0IDE0OjIxICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IEFsc28sIHdoYXQncyB0aGUgbWluaW11bSB2ZXJzaW9uIG9mIE5TUyB0aGF0IHdvdWxkIGJl IHN1cHBvcnRlZD8gIEl0DQo+IHdvdWxkIGJlIGdvb2QgdG8gZGVmaW5lIGFuIGFjY2VwdGFibGUg b2xkZXIgdmVyc2lvbiwgdG8ga2VlcCB0aGF0DQo+IGRvY3VtZW50ZWQgYW5kIHRvIHRyYWNrIHRo YXQgcGVyaGFwcyB3aXRoIHNvbWUgY29uZmlndXJlIGNoZWNrcyAoPyksDQo+IHNpbWlsYXJseSB0 byB3aGF0IGlzIGRvbmUgZm9yIE9wZW5TU0wuDQoNClNvbWUgdmVyc2lvbiBsYW5kbWFya3M6DQoN Ci0gMy4yMSBhZGRzIHN1cHBvcnQgZm9yIGV4dGVuZGVkIG1hc3RlciBzZWNyZXQsIHdoaWNoIGFj Y29yZGluZyB0byBbMV0NCmlzIHJlcXVpcmVkIGZvciBTQ1JBTSBjaGFubmVsIGJpbmRpbmcgdG8g YWN0dWFsbHkgYmUgc2VjdXJlLg0KLSAzLjI2IGlzIERlYmlhbiBTdHJldGNoLg0KLSAzLjI4IGlz IFVidW50dSAxNi4wNCwgYW5kIFJIRUw2IChJIHRoaW5rKS4NCi0gMy4zNSBpcyBVYnVudHUgMTgu MDQuDQotIDMuMzYgaXMgUkhFTDcgKEkgdGhpbmspLg0KLSAzLjM5IGdldHMgdXMgZmluYWwgVExT IDEuMyBzdXBwb3J0Lg0KLSAzLjQyIGlzIERlYmlhbiBCdXN0ZXIuDQotIDMuNDkgaXMgVWJ1bnR1 IDIwLjA0Lg0KDQooSSdtIGhhdmluZyB0cm91YmxlIGZpbmRpbmcgb25saW5lIHBhY2thZ2UgaW5m b3JtYXRpb24gZm9yIFJIRUwgdmFyaWFudHMsIHNvIEkndmUgcHVsbGVkIHRob3NlIHZlcnNpb25z IGZyb20gb25saW5lIHN1cHBvcnQgZG9jcy4gSWYgc29tZW9uZSBub3RpY2VzIHRoYXQgdGhvc2Ug YXJlIHdyb25nIHBsZWFzZSBzcGVhayB1cC4pDQpTbyAzLjM5IHdvdWxkIGd1YXJhbnRlZSBUTFMx LjMgYnV0IGV4Y2x1ZGUgYSBkZWNlbnQgY2h1bmsgb2Ygc3RpbGwtDQpzdXBwb3J0ZWQgRGViaWFu LWFsaWtlcy4gQW55dGhpbmcgbGVzcyB0aGFuIDMuMjEgc2VlbXMgYWN0aXZlbHkgdW5zYWZlDQp1 bmxlc3Mgd2UgZGlzYWJsZSBTQ1JBTSB3aXRoIHRob3NlIHZlcnNpb25zLg0KDQpBbnkgb3RoZXIg aW1wb3J0YW50IGxhbmRtYXJrcyAod2hldGhlciBmZWF0dXJlLSBvciBkaXN0cm8tcmVsYXRlZCkg d2UNCm5lZWQgdG8gY29uc2lkZXI/DQoNCi0tSmFjb2INCg0KWzFdIGh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9yZmM3Njc3I3NlY3Rpb24tNA0K