Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1n9rUj-0002Aw-FK for pgsql-hackers@arkaria.postgresql.org; Tue, 18 Jan 2022 16:38:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1n9rUi-00057U-9q for pgsql-hackers@arkaria.postgresql.org; Tue, 18 Jan 2022 16:38:04 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1n9rUh-00057L-NZ for pgsql-hackers@lists.postgresql.org; Tue, 18 Jan 2022 16:38:04 +0000 Received: from mail-sn1anam02on2061d.outbound.protection.outlook.com ([2a01:111:f400:7ea9::61d] helo=NAM02-SN1-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1n9rUa-00089b-Je for pgsql-hackers@lists.postgresql.org; Tue, 18 Jan 2022 16:38:03 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GbKHfvhV6FJKylWkBSDNxbLEqwOBIYzr/yre5SGcF/aFA9L70AZ8w4fVYKG7T2SveElFMfj5ZkiRHYKbgPm/SNmdLAGhn8PKu/QS1H9SB6ZaLvH3aJTZhS1p9XKdV0HILVfoFImrqnm+gwud3kYNuROVhEibUZHiJqO9FLYWiiMy3d6tUSRrT90+o1LuBgIXWQHT5ECSXBbkQVPqroEQ2Ntudx6oHHfyX0R7G7PKLnu6KU3S/RFuGsdoD6xdoF5ELmalqfbv3Ee0ueZ4gnpBU9vcQExZQ2QPbLvK8t1JrMXTR+HBn6uY3XpYbXH31Q5sXPxlfhC59MLuHFxWLuP0Kg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UmsLyO1nBWkRYHhxGj90PS+u97jf5b/WRGPwFHZ3KUQ=; b=nR8bZ50eQ/GtR9lx4nsY2ZXQ/TKwiUnhEwKrbnNhvLzlSAbeRfjjiZafol1bsOkJXEU+AfDsaHg4rLh/jJgINLshamUUj1Ga/nbUw0ddV9LbF5eiWYDeor1Ytk/7G6AU0OFQ13tZZ6zfhziYT/RxYUpmraMA4TKfCnECkRg06lrHZ4anHwzuhVs4CZL8GsI5Fuok3ksl/vp1n8hMz2Yf6kuFbG2mBU3pvjUH9JQpv4qyS4H32/buIn2820FZRsoooEbQYvOGv4mKwOTF1k2EDv5xRb8D2TEOSPNP8sR4ResMC57QHBmCix9KqMuC+eedCFs+/izQAcqbGfBk4pKrmw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UmsLyO1nBWkRYHhxGj90PS+u97jf5b/WRGPwFHZ3KUQ=; b=qxQB0iX03m4cXddzM+uCldfWlzAd5MbOePnSVYQLZDI4cr1ounkaJxC12nOghtz7+9cxjyeolzSQzxlwyVnhZlEPwQpN3irzA4N+0z5jqn8+05uEQhGM16bd12lye4HoTYO8nTPOj0IjjU/DsweAqMYVcKbRyZFzoR9BbaqFBPM= Received: from CO1PR05MB8087.namprd05.prod.outlook.com (2603:10b6:303:db::16) by CO2PR05MB2709.namprd05.prod.outlook.com (2603:10b6:102:8::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4909.7; Tue, 18 Jan 2022 16:37:51 +0000 Received: from CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::3409:d4b6:1e3c:2c81]) by CO1PR05MB8087.namprd05.prod.outlook.com ([fe80::3409:d4b6:1e3c:2c81%3]) with mapi id 15.20.4909.007; Tue, 18 Jan 2022 16:37:51 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "sfrost@snowman.net" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: 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 Date: Tue, 18 Jan 2022 16:37:51 +0000 Message-ID: <3c9f7678d696302087ee443c84abed3e90b5fe8a.camel@vmware.com> References: <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> <20210324170036.GS20766@tamriel.snowman.net> <8f741a425fd135ca38a28063730715499f7f6445.camel@vmware.com> <20210324181016.GU20766@tamriel.snowman.net> <50c5a423329ea9996a2a2b167931711189ed5d1b.camel@vmware.com> <2FD5BB88-595A-47A0-8F51-0A1B5EEC93FA@yesql.se> <4a15bbab42cd85b6bec83c2609305552d246f68e.camel@vmware.com> <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> <55c94351495efe34e167d4d2b1541b8194f1318c.camel@vmware.com> <55454C3B-1BCB-4F08-AB93-FAF9100B6201@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4f9c558b-8197-4c2a-5bba-08d9daa0deb7 x-ms-traffictypediagnostic: CO2PR05MB2709:EE_ x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR05MB8087.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(4636009)(366004)(26005)(186003)(2616005)(54906003)(86362001)(36756003)(5660300002)(4001150100001)(4744005)(38070700005)(76116006)(71200400001)(8936002)(64756008)(38100700002)(4326008)(8676002)(66556008)(6916009)(2906002)(66476007)(66446008)(66946007)(83380400001)(508600001)(316002)(122000001)(6486002)(6512007)(6506007)(20210929001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?WEdkOUhRMkZwTVpwT0VKd28zd0s3Ny90Z0crZlVub1crVjVnMUtGSGRyem9S?= =?utf-8?B?SmRQazMrdHBtMXR2Ty9QdzU1L3VDa2kyZlg3MTRVNFRRYjJ1RnN5bHA0SGlH?= =?utf-8?B?OVZCS3I3T0Y3THl0ZjExaVhsdUhwMktkYVlMQThDMjlBYjBUOVRNTVAvOVBX?= =?utf-8?B?c3ZKd3NVcUJuZ0JoV1JKdFFjRkdGTW9GOEJuUFRnR0NWUXBNMG1CNDd3MmtH?= =?utf-8?B?Z0xTVzVuL1kxL2NkdHQ0a1ZjdmV2bXI0UUtUdURYaHcva3NYbmVwQ0RZcmlQ?= =?utf-8?B?UlIzWXNvM3hjM3dLR0NTVnNLekVnQ015amJsK1AvdHNrbGFvMjFKTkhHZ0Fz?= =?utf-8?B?YnZnVmw4dEIyM2lncnZ5TWdXU3Y1ZVJ0TW0xdXVNdVptLzN6UzRhMjE4MDlo?= =?utf-8?B?bkhHYW9KQnJJWnRiYTlheHhETExBbEUvNDVpYWJ5N1dMYjYvcEVHVUNlSzlu?= =?utf-8?B?SXo0U09vN2JLSDFXN1RwQmgzUXYvUE11NmtoMzdpUmhCQnVzalgrRHNGaWVU?= =?utf-8?B?eENDYVVnemsxQmk4dCtWV0xINkdlV1hobU5kbzltakVHTWJGSEg2ZnF4cGNB?= =?utf-8?B?VWlyZUMvSlB1Y1RteGhBdHJnVjdHWGNkSDJMbkFZU2tqMFQrWHhnaHhoSjYy?= =?utf-8?B?K3p0ZlNSamR4RlRiZGdvN0tPM2VVZGFUWDFDZ2tMYXg0TWFEUldQWWc5Mlo5?= =?utf-8?B?STJtWHVzOUFJRjk2eWt1YTl6ZlpNbkltQ1lOUGdTVXg1QnllKytra0duYlVx?= =?utf-8?B?Q3llMHlvT3RSTmppUEhhVExVV0NyT3VnWlU2aUdqemxDRGxEVGl1QThhelBM?= =?utf-8?B?Q3hoK3lpdDh2MW04dEZpSElpbkl4SXBLOWxWVE40SzJoRTExZmdqY0VUZHV6?= =?utf-8?B?NWJCbitBUHFraE52aW9lZjVZZDdnMWwyZXBadGRtbndSS1hSei9ac21NZ09U?= =?utf-8?B?d3RTNWlwNHVvMitnUUQ4dHkxYzhvdUUrdktQNkZuQnQ2WTdPdFVqZXloTnZp?= =?utf-8?B?dGs3WDNWZWpvczd5U0d5RHozbjd2UFJhUkVHUG5EVFN2VXlUWUNaUTNQY1RW?= =?utf-8?B?VGRTYlZHdXU3UTdMMWIzSTU0SnRRYzk5NlVGcDNrdjVPM2JEWDl5b2Y2QWdn?= =?utf-8?B?KzJIQnFwNGJBNXNxYXE1b2Izd0xPazVFb1lGVWpHSVA0RGVZK01aVzczU1JG?= =?utf-8?B?Y1hTcFZnYlF5ZE1zS05ocGNUQjc5K295WmdOc3J4VDVHdkhadzJoRDZydzBl?= =?utf-8?B?V3RzWFA0Q2NWaG9jbEtVeExUaExEOTY4aVNTcnhhUnpvT3M2Zk1IVHRDOENi?= =?utf-8?B?ZnBUcGtydUhzODJKQkE5RWpPdkVKeWxQQjBnc1NBK2hoVnlxWnZpUlBYQkJq?= =?utf-8?B?dFFBcUpMajhvdk1IQjZlYmg1WHBqWVNIV0lnK09STDdJbk83cTlMUDFsZGt1?= =?utf-8?B?TnE2MStsU3NLbUFxV2RVK3JmZ0lKYUdzZkh6aitWejUvdXB3aHd1eGJTcC84?= =?utf-8?B?aTZJMW5uWmptNDVIS0RVa2RQRVF2RFA1OU0rUW4yeXBlZVJVeENEUEtWRCtv?= =?utf-8?B?M0hrZnAzd3NjY0xNdk40UGdXRTNzeTZPd1Jvem54Qmx0Y25mc3c4K1JjbEFU?= =?utf-8?B?aEx0RWNqZG15ekpLUG9FRXFPdzBxZFNCcHR4d1lBa3lNdVF6TmpXTUJ1Ukoz?= =?utf-8?B?Z1kvSlpkSlhxc3dSMDNpQ2NTNHZvUzZTdnlIc1ZMK1VveEpYUUZ5ZHVOdnBB?= =?utf-8?B?Wi93NXFtcDdZL1UraHAwRDJ1S1lrQ28wdjRUUXBNcHBjWEQyY1FyazN1dS9H?= =?utf-8?B?OXBOaE12UVJLZ3UyOXhKUmlHeVNHSlJOYWNIT0x1NTdzODRrRmZPRlNkQkFH?= =?utf-8?B?Q2RxTy9uUFMrMFRNZ2JsamxqMDlPdDYxY2d4dWtvTGxzeHJieENTQVNURnBm?= =?utf-8?B?UmtDNWxQbExVaHhRdVgxUEJlbU9PYS9OTFkxQ2xSd2FPL0lNRmllMzQvaDQz?= =?utf-8?B?c0hCTkd6WWlOdHJ6WmxsNGwzYW84SzdqVVo1bXNBY0V4eTdxM1VqdVdzRWNC?= =?utf-8?B?WHdrL1VieEZGMnVObXMxS21kNzdpK3BWWDgyNjhzaUVaTzd6bjF6K25ieW1Z?= =?utf-8?B?OWx6Z1lIRmNUYjJzaHJiaWtBeGRmQlhqdERmV1FvcWFrOElJNU1BVXBCcDB1?= =?utf-8?Q?RwncPLS2jQ31QuaBerk9p+I=3D?= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: CO1PR05MB8087.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4f9c558b-8197-4c2a-5bba-08d9daa0deb7 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jan 2022 16:37:51.5023 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dwtD+9HXWdLtdh4NsNYN2S8rrrt8pzDDuBM03KwMlgLx4Nb8bq6c5Qd7tUH6Xy+t8jBczQX3g1BE1kgIat8WpA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2709 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gV2VkLCAyMDIxLTEyLTE1IGF0IDIzOjEwICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gSSd2ZSBhdHRhY2hlZCBhIHY1MCB3aGljaCBmaXhlcyB0aGUgaXNzdWVzIGZvdW5kIGJ5 IEpvc2h1YSB1cHRocmVhZCwgYXMgd2VsbCBhcw0KPiByZWJhc2VzIG9uIHRvcCBvZiBhbGwgdGhl IHJlY2VudCBTU0wgYW5kIHBnY3J5cHRvIGNoYW5nZXMuDQoNCkknbSBjdXJyZW50bHkgdHJhY2tp bmcgZG93biBhIHNsb3QgbGVhay4gV2hlbiBvcGVuaW5nIGFuZCBjbG9zaW5nIGxhcmdlDQpudW1i ZXJzIG9mIE5TUyBkYXRhYmFzZXMsIGF0IHNvbWUgcG9pbnQgd2UgYXBwZWFyIHRvIHJ1biBvdXQg b2Ygc2xvdHMNCmFuZCB0aGVuIE5TUyBzdGFydHMgbWlzYmVoYXZpbmcsIGV2ZW4gdGhvdWdoIHdl J3ZlIGNsb3NlZCBhbGwgb2Ygb3VyDQpjb250ZXh0IGhhbmRsZXMuDQoNCkkgZG9uJ3QgaGF2ZSBh bnl0aGluZyBtb3JlIGhlbHBmdWwgdG8gc2hhcmUgeWV0LCBidXQgSSB3YW50ZWQgdG8gbWFrZSBh DQpub3RlIG9mIGl0IGhlcmUgaW4gY2FzZSBhbnlvbmUgZWxzZSBoYWQgc2VlbiBpdCBvciBoYXMg aWRlYXMgb24gd2hhdA0KbWF5IGJlIGNhdXNpbmcgaXQuIE15IG5leHQgbW92ZSB3aWxsIGJlIHRv IHVwZGF0ZSB0aGUgdmVyc2lvbiBvZiBOU1MNCkknbSBydW5uaW5nLg0KDQotLUphY29iDQo=