Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2gO1-00032L-P9 for pgsql-hackers@arkaria.postgresql.org; Thu, 21 Jan 2021 20:16:58 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l2gO0-0004ZA-NE for pgsql-hackers@arkaria.postgresql.org; Thu, 21 Jan 2021 20:16:56 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2gO0-0004Z3-1D for pgsql-hackers@lists.postgresql.org; Thu, 21 Jan 2021 20:16:56 +0000 Received: from mail-dm6nam11on2083.outbound.protection.outlook.com ([40.107.223.83] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l2gNx-0003E9-7l for pgsql-hackers@lists.postgresql.org; Thu, 21 Jan 2021 20:16:54 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VGN1uWSYeUOUqnkx/zDS++gfk5QvO4msPw18TGLUSlPu6GUO/ovk/Kb0RRsSJe7mWOhL9qnezDoP7+tJErjYJfM0CRzb19Oaax3GJV+lB36AWfyTXMwOPQcJ5m+KC91BVD45QrFJSdUDXw09+KoUHGGU8A9HsqsV4gJNK2v4qyqpLHPetEBh/aiX7zrhrv+AnCtsT/iPAUi/T7WLx+ZxryZ8LP+m60b1q/2slPvQfkjQT77BQ+heluuCXFIbJBznLvnL1NLF2Hu7WITfV3ef/zeEYu+dELm5w2CD/N6DlmW60+fxHHd/AvLXJPYR4Hn0I1HyXbsOMBaw3QVjDVJhUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EcEDntxjszgSJrU+WNt7E2+ORb3EQdlhOePSmN+mzss=; b=juvPiQAFxYCVFfPLtGg+jnT+ZQhiY+GHe4gxky2RnWVC63DeVp3DqudvSsUmLdJSRappuhEY2KCMObXinfJdHEDDzd0GFD5oUBbkiDnpUgqnZyEd97HXMCWw4fFvBcfMcG/PORxLu7eiP2BhjaTMtZYps+42T/BScpAtJ7cFg8LTQsAQnej9mZlg3WFLuFGsDuv/AyPcaL+IrquAez2i4JmpASovV1s7AL4gsY7HtRTusJcX/YyaIQ3BsgP4SgxbZrHdyBvHqhBICVZMs7HvLSAtDwgzEu6f5ey28bLFiaxba8LEIwks816BEsFy42DhHE8sA+1ojXjQCksi4h6P6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EcEDntxjszgSJrU+WNt7E2+ORb3EQdlhOePSmN+mzss=; b=g9YK2GNleytyxBvhx8iYE8YKrQAJ+0zw01LzJahfJafcvARuIOPw7xVNIkc5CIpQhHEVAy/rkicVUA/L9UaFkFMggOYzxdA6rkFnDD3UftP5t2Cjs3Hkghz7ny10I3hstv1Ga34/mc8ry91GHEexdaujua0VjQxPXB8GQYRw0yA= Received: from (2603:10b6:300:65::20) by CO2PR05MB2661.namprd05.prod.outlook.com (2603:10b6:102:15::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.5; Thu, 21 Jan 2021 20:16:50 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3784.010; Thu, 21 Jan 2021 20:16:50 +0000 From: Jacob Champion To: "daniel@yesql.se" , "thomas.munro@gmail.com" CC: "pgsql-hackers@lists.postgresql.org" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46jppuyAgAxS7QCACpBtgIACrTAAgAZM+gCAB0o1gIEjL1SA Date: Thu, 21 Jan 2021 20:16:50 +0000 Message-ID: <3a4f4f23cb9d8d498c6d901b431f37afa91d82e0.camel@vmware.com> References: <3D2C67F8-7EE6-4534-BE8A-BDD828562672@yesql.se> <383EE7EE-ADEE-4C48-8E7B-28B361E5EA3B@yesql.se> <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> In-Reply-To: <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 36f01f27-ad7f-4799-40b2-08d8be497c9c x-ms-traffictypediagnostic: CO2PR05MB2661: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SPARAKhJpB+yPIW0bjPydhAjCMv4/CN9RlrwrT9MM8dilZ2BS+W7UjKLYdkWm0d1cmuVYnmfhpSF9inA/eDfS7Y+ceB8zGisEfQtcAOW4lz1alLTD1s6nAX6fMRwCWOchJWNTSolPwLWonhkWUI7/hIvPTlKFgyf4yS+hPIgsJtlMgPy3OFtw7yMvefJjRKLyFmaIE3ZKDcJDg2VeEHj+4PS5FTri5L5CenIGpUJHcI0xCmPSLFNimsUKAQKm/9RB/gTW0CUejdJ88AahNSiPrfKqKJ96TdnpD66De6XLR13+xn7FpQinIZE7aOEXhgTN2XhDNPLsjK9VoykXfLwcVZQ1HCE58vEild2ZV8ZM55+zVkWmyX+W5gJOyi9JaoLUPQxoz9dm2TXTDZj/iQgeSzkNKPxCwsX2e/tJy+kw8pXMnTlgLqra+aI4IUVc/JAIagbB8C9oJMLzp5HNY+ohw== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(39860400002)(376002)(396003)(346002)(136003)(366004)(66476007)(86362001)(6486002)(2906002)(5660300002)(6512007)(66556008)(76116006)(66946007)(66446008)(8936002)(71200400001)(4326008)(316002)(64756008)(966005)(478600001)(2616005)(8676002)(26005)(6506007)(186003)(36756003)(110136005)(54906003)(83380400001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?aTNPaGJnSkc0L1VJdGhCZmVrNExDV3loQlRaeEo0SlJ5TThIekl0UEoxdEs4?= =?utf-8?B?dGpkYlVEdzRVaVlmTTc1ekhLQVRGbTk2NEJ5NmxUTkFsTHFXK3U5NmU0NGVv?= =?utf-8?B?bDh4bkRiQXhkUnk4R1lidDdlQ3g4MDRpVEdTai9qNWFzcWkyYWJ3K3M1RFY0?= =?utf-8?B?NkFiTlQvRG1QQXJpOEh1MjZzSjZtVlc2emUrTDF3diswVld2WWRQRndOYmFx?= =?utf-8?B?aU00eW1QTGNWNnQrTUFiQnRiOStWemlIbng5aVErUUd4a3FrL2c4QkRqUkFE?= =?utf-8?B?TExkWkpyb3dXS1NLemlLOE16V0VnSEZjMWJ2M1NyWFIyMitXQnFYMU9DS1VX?= =?utf-8?B?ZzUvek1TSUdpNi9FYTc4WTJWWHZPR0t5RVhtT1ZzUlVMOHB3SjN0TGxTYkJR?= =?utf-8?B?SkJOU0FoRURraWprYjlkVUVCYnRnaVhXb1RvTk8yUmdCNHdLSFJHTjlEeVVz?= =?utf-8?B?NnRFVTNacEJBMFJUUnFoczQyNVBnSTNLK0FpeTZmNmozbGxRdldKek1tdXRC?= =?utf-8?B?Zy85LzdzNnlBYXZmWDlyUDFiSFpoejlROGdSVXJGWWhWZWJ2Wm9GY081VEFW?= =?utf-8?B?THhTZVdTZVBlMzQwaGlseGlPaExMT3J6T0tFS3VOanV5NW92MHNrc1RQdTlZ?= =?utf-8?B?OE9LT1NEM0dOaVBGTzdDa0JjZzZUdG5Ddk01N2c1dlpCZmNjTC9kNW9vYUl6?= =?utf-8?B?cFJtM3g4L0xyU3lJczJLTUR6Y1dobXJUVFNpaTlGYW93a1dUTm81SDZzZytw?= =?utf-8?B?VStYMkNoYldXL3gzUEt4TlJFa1VrRm40Q1JTQ29URThIc1lCMFBVRVgwVkRP?= =?utf-8?B?KzNRR21ESFlRZWMzSlpvUHBFNDl5dDBxdlRMWmpiWEovTnVWeTZBNHNWMHJy?= =?utf-8?B?Z0F2NDVPTnZ4TUN2OHlWMk5TWHpOWTBsNndla2RVRDE2TXdDd2R0b095QUVK?= =?utf-8?B?L2NHdENQakIzU0RFbWJYa3YzNTNWMlhENjc5dUVQVHVPM2V2bWFZbTQwbjlY?= =?utf-8?B?R3pzbGplS3F4TVF2cGtIMHVpR0RkM3BuZ3ZpYUMxQ3RUZDdtODNmbWxxM2c4?= =?utf-8?B?UGJpZm9QTC9NMzhnbEFQbWlpNnNib3l2ZUZwNm1KVEJ3ekdqODVMdWJQcEZy?= =?utf-8?B?MkhOMjFlcGhDL21EbEhXdm5GblBvUDdhcGRHZTNoVWFpTTNma1d5MjlhMXM2?= =?utf-8?B?dkVXTlZEL0s0Mlc3WitBL0VLb0JlcnZxNXIvcGRDaGYvMTBIaDVzNUNMbDlU?= =?utf-8?B?U2VMc1lRNWVSYjBlMGZGL2xGNGVtVzR0KzF5b2RQUDh6ZDVzZHRLV1ZGVmlQ?= =?utf-8?Q?ZZskFjXemyxTNISHs2xIfIP6Etlmsn8Mv+?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <2BD1006FC047354D89AADDE4FE21DFC6@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 36f01f27-ad7f-4799-40b2-08d8be497c9c X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2021 20:16:50.3910 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6itwLV532UBf/LGsd3PLUcqskLPC+5SMKqpkqw5Ea2Fz13Ym8n5MiLOJ3qsB/yzN0fXIlQmPWkxxj0H/UHIrAg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2661 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gTW9uLCAyMDIwLTA3LTIwIGF0IDE1OjM1ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gV2l0aCB0aGlzLCBJIGhhdmUgb25lIGZhaWxpbmcgdGVzdCAoImludGVybWVkaWF0ZSBj bGllbnQgY2VydGlmaWNhdGUgaXMNCj4gcHJvdmlkZWQgYnkgY2xpZW50Iikgd2hpY2ggSSd2ZSBs ZWZ0IGZhaWxpbmcgc2luY2UgSSBiZWxpZXZlIHRoZSBjYXNlIHNob3VsZCBiZQ0KPiBzdXBwb3J0 ZWQgYnkgTlNTLiAgVGhlIGlzc3VlIGlzIG1vc3QgbGlrZWx5IHRoYXQgSSBoYXZlbnQgZmlndXJl ZCBvdXQgdGhlIHJpZ2h0DQo+IGNlcnRpbmZvIGluY2FudGF0aW9uIHRvIG1ha2UgaXQgc28gKE1v emlsbGEgaGFzbid0IHN0cmFpbmVkIHRoZW1zZWx2ZXMgd2hlbg0KPiB3cml0aW5nIGRvY3VtZW50 YXRpb24gZm9yIHRoaXMgdG9vbGNoYWluLCBvciBhbnkgcGFydCBvZiBOU1MgZm9yIHRoYXQgbWF0 dGVyKS4NCg0KSSB0aGluayB3ZSdyZSBtaXNzaW5nIGEgY291bnRlcnBhcnQgdG8gdGhpcyBwaWVj ZSBvZiB0aGUgT3BlblNTTA0KaW1wbGVtZW50YXRpb24sIGluIGJlX3Rsc19pbml0KCk6DQoNCiAg ICBpZiAoc3NsX2NhX2ZpbGVbMF0pDQogICAgew0KICAgICAgICAuLi4NCiAgICAgICAgU1NMX0NU WF9zZXRfY2xpZW50X0NBX2xpc3QoY29udGV4dCwgcm9vdF9jZXJ0X2xpc3QpOw0KICAgIH0NCg0K SSB0aGluayB0aGUgTlNTIGVxdWl2YWxlbnQgdG8gU1NMX0NUWF9zZXRfY2xpZW50X0NBX2xpc3Qo KSBpcyBwcm9iYWJseQ0KU1NMX1NldFRydXN0QW5jaG9ycygpICh3aGljaCBpc24ndCBjYWxsZWQg b3V0IGluIHRoZSBvbmxpbmUgTlNTIGRvY3MsDQphcyBmYXIgYXMgSSBjYW4gc2VlKS4NCg0KV2hh dCBJJ20gbGVzcyBzdXJlIG9mIGlzIGhvdyB3ZSB3YW50IHRoZSBOU1MgY291bnRlcnBhcnQgdG8g c3NsX2NhX2ZpbGUNCnRvIGJlaGF2ZS4gVGhlIE9wZW5TU0wgaW1wbGVtZW50YXRpb24gYWxsb3dz IGEgbGlzdCBvZiBDQSBuYW1lcyB0byBiZQ0Kc2VudC4gU2hvdWxkIHRoZSBOU1Mgc2lkZSB0YWtl IGEgbGlzdCBvZiBDQSBjZXJ0IG5pY2tuYW1lcz8gYSBsaXN0IG9mDQpTdWJqZWN0cz8gc29tZXRo aW5nIGVsc2U/DQoNCm1vZF9uc3MgZm9yIGh0dHBkIGhhZCBhIHByb3Bvc2VkIGZlYXR1cmUgWzFd IHRvIGRvIHRoaXMgdGhhdA0KdW5mb3J0dW5hdGVseSB3aXRoZXJlZCBvbiB0aGUgdmluZSwgYW5k IEdvb2dsZSByZXR1cm5zIH41MDAgcmVzdWx0cyBmb3INCiJTU0xfU2V0VHJ1c3RBbmNob3JzIiwg c28gSSdtIHVuYXdhcmUgb2YgYW55IHByaW9yIGFydCBpbiB0aGUgd2lsZC4uLg0KDQotLUphY29i DQoNClsxXSBodHRwczovL2J1Z3ppbGxhLnJlZGhhdC5jb20vc2hvd19idWcuY2dpP2lkPTcxOTQw MQ0K