Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nZb0k-0001W4-FU for pgsql-hackers@arkaria.postgresql.org; Wed, 30 Mar 2022 16:17:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1nZb0h-0001sQ-K7 for pgsql-hackers@arkaria.postgresql.org; Wed, 30 Mar 2022 16:17:27 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nZb0g-0001sH-Pq for pgsql-hackers@lists.postgresql.org; Wed, 30 Mar 2022 16:17:26 +0000 Received: from mail-co1nam11on2041.outbound.protection.outlook.com ([40.107.220.41] helo=NAM11-CO1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nZb0d-0001N8-Rf for pgsql-hackers@postgresql.org; Wed, 30 Mar 2022 16:17:25 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=eV7tPP8xpDjLhFy9QqfAYIKtp9gygmhc8d2G8vqMXQcWFFzKQD18dttpHOqFztnbuSw4BS1MM8b3sLrbK2+xGDcStAJsHH2PMc3Ega7K0YELxF3d3B4jEnZjFpw4/OA9CpjeZfn5gnLWXX+G9EVW0nCWbEe0MAj7VBxMEIL3AMGDL2DLj8C0auZcdbP8FVLfDbaVa6+p5vAgAVNQHKHDnb7YCUUXo0NVmLDTR9Bbt3RfzsFOOkALhDAelmFpco5dymSzcq2blbUPgO29gmzv6fufRtszj21cesCy8r5WUzBvtN+l0bnXwb3+fstyju1YLTcABN3HhNA8cQR6k/zz8w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=23i5zHsYmbRH7xBn7OnQhzlaxy0IJB3GfFGymFh83Bw=; b=KUrJ43k1OIiJt3xvWO96Irhaeb1ECjzNPLjwQgNMuv746fAqz24hqByLD4VtC8A506I7MzNXc1Aq+nxQbmOkvqBS5/cuI7IgCbSL2+HkxDC+qU4qRTeSWGozWEosUnIxiuyZ7gJWRRPqO4uZvC3Qef4cWbte1t0BEBtQ7UHp/uY9IbBtiVnG4YXUEIBrZTZgLi26iqmJY+lTBn8WAd2zFimEw7/1Oexs7sG3WW1HCSO8tsVwdtSfHyRbAJqaOgMjp1i3HlEMYUToJPodO3h2S/kg8oH+vkP048u878PfIMtRvd8B3w+5p7ZcmrprPb+TQO4K4NaPu0MgaLcxVX+MuQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=23i5zHsYmbRH7xBn7OnQhzlaxy0IJB3GfFGymFh83Bw=; b=sHfHsbzLcBP094YKSRkVrjvNJ84dyzIdV2MaKvq8uV/MYrFwQ9j6/1GCOkOZ/lJI+tddUa8xVZw3/jUIehoHDKVj1D71W0xT7IGEx4+5AvameGYKu7O6WEqU4l3Ck0eOtlxeM/uPvbCyKijJBpUrXj9Rp0oJhaXs+rpSwIql1rk= Received: from CO1PR05MB8087.namprd05.prod.outlook.com (2603:10b6:303:db::16) by MN2PR05MB6093.namprd05.prod.outlook.com (2603:10b6:208:c5::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5123.21; Wed, 30 Mar 2022 16:17:19 +0000 Received: from CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::318f:4d91:823:8e1a]) by CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::318f:4d91:823:8e1a%8]) with mapi id 15.20.5123.019; Wed, 30 Mar 2022 16:17:18 +0000 From: Jacob Champion To: "daniel@yesql.se" , "peter.eisentraut@enterprisedb.com" , "tgl@sss.pgh.pa.us" CC: "stark@mit.edu" , "pgsql-hackers@postgresql.org" , "horikyota.ntt@gmail.com" Subject: Re: [PATCH] Accept IP addresses in server certificate SANs Thread-Topic: [PATCH] Accept IP addresses in server certificate SANs Thread-Index: AQHX8hoz9DTsvozxTE2eDKi/5mA03aw0noUAgADXTYCAAMfZAIAAFMUAgBtEogCAA6YZAIAn2AyAgAPhpACAAMK2AIACNW8AgAQmkoCAAqTtAIAJyJIAgAPgf4CAJpI3AIACkPYAgACa2gCAARs+AIABckkAgACjIYCABhUaAIABDywAgACQmICAATaugIAGHq6AgAAXqICAALDxgIAAuXuAgAKSU4CAAE4pAA== Date: Wed, 30 Mar 2022 16:17:18 +0000 Message-ID: <26dd7e4b482832323e38ba6f08e3651b5c2c5817.camel@vmware.com> References: <20220318.163857.1357392368287571138.horikyota.ntt@gmail.com> <20220322.133202.1699013732440256188.horikyota.ntt@gmail.com> <5878cc4f261dfac70999be7c10d80e898449e388.camel@vmware.com> <20220323.142007.1816604521514641243.horikyota.ntt@gmail.com> <2da38935f528904f62dd5846767dc53585d8a309.camel@vmware.com> <552429.1648415967@sss.pgh.pa.us> <3F1A8748-DEF8-454C-B7ED-F536CCF7F115@yesql.se> <5EA8D400-9705-463C-B30F-E7A78EE5C8FB@yesql.se> <27dd89aa5bd8fac8fdfdbd33dd460422bcb77d6b.camel@vmware.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c0bbc21f-1c10-4286-0108-08da1268c2fb x-ms-traffictypediagnostic: MN2PR05MB6093:EE_ x-ms-exchange-atpmessageproperties: SA|SL x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR05MB8087.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(4636009)(366004)(76116006)(508600001)(86362001)(36756003)(5660300002)(4326008)(66946007)(64756008)(66446008)(66476007)(66556008)(8676002)(186003)(26005)(6486002)(2906002)(316002)(110136005)(54906003)(71200400001)(8936002)(53546011)(122000001)(6506007)(6512007)(2616005)(38070700005)(38100700002)(83380400001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?aHFqWHZ0MHp4SU9PUSt2UEp6UmFnZlU4bEVoZGNORjFvdzhndzFTT1BiYXcr?= =?utf-8?B?QjErUkNBUk14YlBGMlVOWnE4RXRGRll6cDNoSkdDdVVzRGtjc0ZyZllpaElU?= =?utf-8?B?YmVJQ0dUNFBSOWJRQzVuVVN4ODVaVHZLY2crc3JLTUdtdFRaaGJiSTBiTVZJ?= =?utf-8?B?TnpFZkFybkFsWTlrNXhXSitucDhQaklqWkM2cEc4SnUwTlY2N0gzN29CVFR3?= =?utf-8?B?bm1rdnEwR2dpZTlJOTBpM3J0WU1tZHQwczcvZC9SeW40NjBWMXhCSlg5YjUy?= =?utf-8?B?clFhdi9LNVVTZmRKWk4rMnpsYmtoV1dic2kwVHpzeUNlR0s3djdjTk1KRDFC?= =?utf-8?B?YSs3T1ZUaUpBUUNPWlJaUW52TlNWNGZaTWZQWk1KWXBaeW1Nb3VkaDQybjc4?= =?utf-8?B?VFErczRGRzc0bzVhRCthQzNFbVNSNUdXeDlTQ21YM0tMcStWczJPN1BudzJP?= =?utf-8?B?S25TbGNwdytwRmxoaWU0emRmN0VSc3duN0JCb0VPNUtsVlREUXBOelE3MGsv?= =?utf-8?B?Umd1V0pXQTIrTWpxK2t0UElIR2dGVisvemFraXFqZE81ays3RVhWeXkxZEFX?= =?utf-8?B?a09vMytXMEE2bTRWTzd1dmxCQzNrSTFNSThkZVlZdXA5SmxzRXpMUWFmMHJP?= =?utf-8?B?RERkZnMvc01KSUlGWmhNdEZoMjU1UVFDOHdSV1I1L0VjUXJPbzBTVW13T09O?= =?utf-8?B?RzN4OEY3S0F1bWoyR0xLMVEzTE5EMjhTUmtad2MvTW54ZVlMUDdEL3FEbmpL?= =?utf-8?B?dXBrQ2dVd3FrOUl3QWJTNFZBa0ZBb08yV1JzZHNCTjdCQUY5YU5qekRGUURU?= =?utf-8?B?TUhSV2xlcXBaOGw1cUlmV2FJd1pZanBUOS9vYTliYTZLaS83bi8yWmRJcTZG?= =?utf-8?B?MmFmby9yR3E2ZWxvVVFvWmZjVStqc1JWd1Qxc0Q2Y3lIS3VtbTdZd09Fb3lt?= =?utf-8?B?REllVDdkSDR6Vkg4QjdLTFhaUThRRkJqdkMzRzgwTzFZWGZDWDhoZzJxYzFP?= =?utf-8?B?SllIbVRHcnozZ2RQa0xQVzJnaXEvRjE0U290Q2gvSTdOQjZ6bWR4WjY3M0hC?= =?utf-8?B?bTRTZDczVm5ZU2I3SlBUL1pkdlFRS2M5Yk5yMHN2bFpnTHVQZHUveGRYOVhX?= =?utf-8?B?SW44OVZiaGt4c2tCZzV5ZFROYzcxWm8zZExqMEYyang1cU1QSVROZlNrZWRW?= =?utf-8?B?T2h2UkgvK0l6ZnpIbWlDM2hSbXNXNkhocnNHcDJFQkxydEp0SzhmM2x6ZHll?= =?utf-8?B?THBrQ0tJOVRjV2N1VkNmN3cweEc0VjE2bVlSSi9QS3hwNUpDU1ViUFBZSWxN?= =?utf-8?B?Rm1XbFkxM3ArbjY2SFY5Y3IvM3hBZmM1UzVDekw5Y2tPNjZ4eWM4QUltb0V1?= =?utf-8?B?TkVHdmFvZ1pFTFc1Z1lkYWZndXJXNjM0MWhDOWltbzhWTjViMk9QOG9FUXM4?= =?utf-8?B?a3hhMXVrNEVQb2RtUVB1ejI2aThoZGNIZnBpR2ZPYUtSMWRsWGs5NVZuR3pN?= =?utf-8?B?bTZjR2twbWFhYXIvc2VuQW82SXJHd05WUXpNS1MyeHJpUm42VW5Ed1BmdCsy?= =?utf-8?B?TWhmcE9ha3k3Q2l2ZXJWQ0V3QjliM3diMzBxOWR5ZUlpOHVoaDN3bVFuRlBR?= =?utf-8?B?YTJ1aDFSWGlCaXNZN0Y1bjBBQ282QlBpSzFZelpJZmc5by84OWdtS0JieCtp?= =?utf-8?B?OXo3bkNuMGQ0MEdUTWV5QTBXRldXTkdqNE5OVEh6UWFLNlNDQVMycGlNSm1G?= =?utf-8?B?ZEJpc3pidVJEbll4ZjJWMjZDaDlJR2NzYzREMkNlYWxwUkMxWlJMNCtVOWVk?= =?utf-8?B?V1dBL28xeDg5T0JpUEFEcnByTlFmUnJPMFVBTk1NdVVraWw3MFdpRnc2WnJV?= =?utf-8?B?WlEvRTlGKzNzVnhNbEZwSDA5dDArM3VvLzBYaU5CVHlZVTR1Z0Z5WnpxQlVl?= =?utf-8?B?MXBGRzhoOWJmaTd3MTliWTlEcSszM1hrVnBnaFY4cDRpUnNscE0wYlFHeGxM?= =?utf-8?B?RTM0UVNKbnFINkZ2SklMVlJYd3BtZFFyc3picTg3WWpSMFZaWkJybm03UXNB?= =?utf-8?B?cmVGeG5WVm5tUnFoZ3BBR2VlNHpIMVBudGp3dlNEMy80c0h2S29TcVIrTCtX?= =?utf-8?B?TkNpWHZ2VDFuUnllbTVYZjBxTjA3NG9WM2FyOXQzcWxHY3UzNnBnT3RhaDYw?= =?utf-8?B?QythMXc3cTN0N0JTSzVvdW4xSVBJcmszMTRRUnNOSFJGMStOcVN6VzNBa1VG?= =?utf-8?B?SE5JQjVXREFrZjhVMWlMOHRHM3ljWDI5ZkV6SHJ0cEFxYUY4N2VIcjRjSGpC?= =?utf-8?B?TWRaS1JWaHlISFRJVHlZMkFBR0RiN1BIYlNzR2YzMllKenVVQlRBS3p0Q21J?= =?utf-8?Q?jX01t0tkA7saqTak=3D?= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CO1PR05MB8087.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c0bbc21f-1c10-4286-0108-08da1268c2fb X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2022 16:17:18.2068 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: g8IwR/I4x2PxawBYkolNJVesXJ4DOVTzl1hWroOMy914EVHGJtfW74/EpLxn8EcvXvpmfzmSORG5VH1pC7mPrQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR05MB6093 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gV2VkLCAyMDIyLTAzLTMwIGF0IDEzOjM3ICswMjAwLCBQZXRlciBFaXNlbnRyYXV0IHdyb3Rl Og0KPiBPbiAyOC4wMy4yMiAyMjoyMSwgSmFjb2IgQ2hhbXBpb24gd3JvdGU6DQo+ID4gT24gTW9u LCAyMDIyLTAzLTI4IGF0IDExOjE3ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90ZToNCj4g PiA+IEZpeGluZyB1cCB0aGUgc3dpdGNoX3NlcnZlcl9jZXJ0KCkgY2FsbHMgYW5kIHVzaW5nIGRl ZmF1bHRfc3NsX2Nvbm5zdHIgbWFrZXMNCj4gPiA+IHRoZSB0ZXN0IHBhc3MgZm9yIG1lLiAgVGhl IHJlcXVpcmVkIGZpeGVzIGFyZSBpbiB0aGUgc3VwcGxpZWQgMDAwNCBkaWZmLCBJIGtlcHQNCj4g PiA+IHRoZW0gc2VwYXJhdGUgdG8gYWxsb3cgdGhlIG9yaWdpbmFsIGF1dGhvciB0byBpbmNvcnBv cmF0ZSB0aGVtIHdpdGhvdXQgaGF2aW5nDQo+ID4gPiB0byBkaWcgdGhlbSBvdXQgdG8gc2VlIHdo YXQgY2hhbmdlZCAobmFtZWQgdG8gbWF0Y2ggdGhlIGdpdCBmb3JtYXQtcGF0Y2ggb3V0cHV0DQo+ ID4gPiBzaW5jZSBJIHRoaW5rIHRoZSBDRkJvdCBqdXN0IGFwcGxpZXMgdGhlIHBhdGNoZXMgaW4g YWxwaGFiZXRpY2FsIG9yZGVyKS4NCj4gPiANCj4gPiBUaGFua3MhIFRob3NlIGNoYW5nZXMgbG9v ayBnb29kIHRvIG1lOyBJJ3ZlIGZvbGRlZCB0aGVtIGludG8gdjExLiBUaGlzDQo+ID4gaXMgcmVi YXNlZCBvbiBhIG5ld2VyIEhFQUQgc28gaXQgc2hvdWxkIGZpeCB0aGUgYXBwbHkgZmFpbHVyZXMg dGhhdA0KPiA+IEdyZWcgcG9pbnRlZCBvdXQuDQo+IA0KPiBJJ20gbm90IGhhcHB5IGFib3V0IGhv dyBpbmV0X25ldF9wdG9uLm8gaXMgcmVwdXJwb3NlZCBoZXJlLiAgVGhhdCBjb2RlDQo+IGlzIGNs ZWFybHkgbWVhbnQgdG8gc3VwcG9ydCBiYWNrZW5kIGRhdGEgdHlwZXMgd2l0aCBzcGVjaWZpY2Fs bHkuICBDb2RlIGxpa2UNCj4gDQo+ICsgLyoNCj4gKyAgKiBwZ19pbmV0X25ldF9wdG9uKCkgd2ls bCBhY2NlcHQgQ0lEUiBtYXNrcywgd2hpY2ggd2UgZG9uJ3Qgd2FudCB0bw0KPiArICAqIG1hdGNo LCBzbyBza2lwIHRoZSBjb21wYXJpc29uIGlmIHRoZSBob3N0IHN0cmluZyBjb250YWlucyBhIHNs YXNoLg0KPiArICAqLw0KPiANCj4gaW5kaWNhdGVzIHRoYXQgd2UgYXJlIGZpZ2h0aW5nIGFnYWlu c3QgdGhlIEFQSS4NCg0KSG9yaWd1Y2hpLXNhbiBoYWQgdGhlIHNhbWUgY29uY2VybiB1cHRocmVh ZCwgSSB0aGluay4gSSByZXBsYWNlZCB0aGF0DQpjb2RlIGluIHRoZSBuZXh0IHBhdGNoLCBidXQg aXQgd2FzIGVub3VnaCBuZXQtbmV3IHN0dWZmIHRoYXQgSSBrZXB0IHRoZQ0KcGF0Y2hlcyBzZXBh cmF0ZSBpbnN0ZWFkIG9mIG1lcmdpbmcgdGhlbS4gSSBjYW4gY2hhbmdlIHRoYXQgaWYgaXQncyBu b3QNCmhlbHBmdWwgZm9yIHJldmlldy4NCg0KPiBBbHNvLCBpZiBzb21lb25lIGV2ZXINCj4gd2Fu dHMgdG8gY2hhbmdlIGhvdyB0aG9zZSBiYWNrZW5kIGRhdGEgdHlwZXMgd29yaywgd2UgdGhlbiBo YXZlIHRvIGNoZWNrDQo+IGEgYnVuY2ggb2Ygb3RoZXIgY29kZSBhcyB3ZWxsLg0KPiANCj4gSSB0 aGluayB3ZSBzaG91bGQgYmUgdXNpbmcgaW5ldF9udG9wKCkvaW5ldF9wdG9uKCkgZGlyZWN0bHkg aGVyZS4gIFdlDQo+IGNhbiB0aHJvdyBzdWJzdGl0dXRlIGltcGxlbWVudGF0aW9ucyBpbnRvIGxp YnBncG9ydCBpZiBuZWNlc3NhcnksIHRoYXQncw0KPiBub3Qgc28gZGlmZmljdWx0Lg0KDQpJcyB0 aGlzIHJlcXVlc3Qgc2F0aXNmaWVkIGJ5IHRoZSBpbXBsZW1lbnRhdGlvbiBvZiBwZ19pbmV0X3B0 b24oKSBpbg0KcGF0Y2ggMDAwMz8gSWYgbm90LCB3aGF0IG5lZWRzIHRvIGNoYW5nZT8NCg0KVGhh bmtzLA0KLS1KYWNvYg0K