Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5Ymn-0007rK-Uo for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Jan 2021 18:46:26 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l5Ymm-0002xP-RL for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Jan 2021 18:46:24 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5Ymm-0002xH-6D for pgsql-hackers@lists.postgresql.org; Fri, 29 Jan 2021 18:46:24 +0000 Received: from mail-dm6nam11on2086.outbound.protection.outlook.com ([40.107.223.86] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5Ymi-0007yY-N1 for pgsql-hackers@lists.postgresql.org; Fri, 29 Jan 2021 18:46:23 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CuGrkcEBrpMdNVfjY05pqftcmiyjkjMh9drbPeQ8Co/nApYmi8fgpItW1M40G7xF8PBq5vg4Fy8TU+rPv65zqCK//pGFxgbs/CZtODgioF2UZu/FVcxbp0Fqq9aOKlIDxg90h1T6etmpWF1OmZYRcXbHMRFwSE4cgKxdZ8cqoB+/oMJlyS2STZ1z5juAXshDQY2oW9DRK0LFML/iJfIzd31Sbke0WLd14raVRK6gt5sssQiU65FcGCA29xMwk4I8Qtw7b5NNJJKGJ95rQEDNxtnHGPOq6DoVH5NXfIVKn9zAQT0LLEOz6vZOEJJqmw3lbwcdm67kElZJ6dQkksoteQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=N4L+Kc/PWtnvojs5I4ZAukX7OBw7NX68PUPcY9PtfjI=; b=aNKe6XjB1fOQO38iNO/6lTKYKJ1NOmOBYcph0Y8wdjHShfz0F+LoSZgu2KYc53nASql5TdX6u6IgeFgAMNWA+B2FJ5zHL0ptz9yT8cY63kOMhLK4AHXyXANLkn9CygWBHV2rFoOiHPXWvzx3ljuVbPbCBuV49+O30rAmSkI9Vg20AZvcUP6YWfn297i7OG4g5l77vGhxcHXo1hwfXD8T7EtgYNdRq/JYzBgvIIc/yh3X5JjyOQw4h8gr/Mx8ffhptrYsdLyUoEHajz0TPnDEDt+JI09iTIL+/gZfHDm7MQZrtJ2ceMEbqroSQA8ZCysTaiJ6pkJy5yMRjLV3/IDO0g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=N4L+Kc/PWtnvojs5I4ZAukX7OBw7NX68PUPcY9PtfjI=; b=hOB/hiagmFzzu3j4dFJP6pe3kfzTVRzLxsrck9RFS/h2lvS9/gfu3gr8m2CMlUobnA0cC8b9sUUXDLeaCG3Ttz3oo8qOXb+EWd49lRUYTiH93hv44Qpebko7nxYzbrPq0tA+/w03MSdF3/vwoz/jyi9utUdC2uOB4m+SIx07FTM= Received: from (2603:10b6:300:65::20) by MWHPR05MB3213.namprd05.prod.outlook.com (2603:10b6:300:b2::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.8; Fri, 29 Jan 2021 18:46:17 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3825.008; Fri, 29 Jan 2021 18:46:17 +0000 From: Jacob Champion To: "daniel@yesql.se" , "michael@paquier.xyz" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAikkgIANEfAAgABhkwA= Date: Fri, 29 Jan 2021 18:46:17 +0000 Message-ID: <40095f48c3c6d556293cb0ecf80ea10cdf7d26b3.camel@vmware.com> References: <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> <5C27CF6F-5BD3-4639-AAA6-73465595B6DF@vmware.com> <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> <60DFB11D-2466-4286-84DC-F8F965DA675C@yesql.se> In-Reply-To: <60DFB11D-2466-4286-84DC-F8F965DA675C@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e0ea76a1-89d7-4345-dcef-08d8c4862997 x-ms-traffictypediagnostic: MWHPR05MB3213: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(346002)(376002)(366004)(136003)(39860400002)(396003)(2906002)(186003)(2616005)(26005)(6506007)(53546011)(478600001)(86362001)(71200400001)(66946007)(66556008)(66476007)(316002)(83380400001)(6512007)(8936002)(6486002)(110136005)(5660300002)(54906003)(66446008)(64756008)(36756003)(8676002)(4326008)(76116006);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?bHVpU2hsYm9udENGZHc5Qi9VZWtnZXY3Sks2d0tBMmhNMWxXMzNRWkN1ZmVS?= =?utf-8?B?d3lNTDB6ekpMWVRndVh5QW5oOTdWTVhRMDlKRkNraFRpTk1XcnBVYk1tRGdL?= =?utf-8?B?YmlyWFF1MDg5Y1g2MG9oNjBwT0JLOFpNL1dlYmx4UTFtMGFTRzJkMTYvM1Rp?= =?utf-8?B?MFBMY1JEYWVaRHBDWXpya0c1ams4b1VoWStsNHNxNFFRNXhXZXZxZGJMcDJG?= =?utf-8?B?OVIvQnF2SEczTmZGZXphOWoxeXl3alR5UThqdWJuMnIxS1B5ZHpSU3F6RG96?= =?utf-8?B?c2FUbzJBOUNDQjZBM014ZmhhY0M2Wk1JQ1U0Vno0Ym1qRlUxL3RucFdWNW5J?= =?utf-8?B?eWxQS0ZPaVBDNnNHc1B2N0VQVE5OSy9KeklRVDlZWWxrdkRFUE9LcjNDdUEw?= =?utf-8?B?ckRwSU5rUnFHUUhDNmZmVWEwem04Z3A3dzFLZWV3azZNQnZoRGtBaGRveVZ2?= =?utf-8?B?bHB3SEx4czljSUFQSXpVWnlUb096b0ZLTTdBT3FPMWJBR1YrVlp2NUtmRTlk?= =?utf-8?B?WkZXbGlldTFEZ2hmbzRpK3VlMi9NcGk1NCtRYzJ4N0poWDdWVml0dlFxdFE0?= =?utf-8?B?WDVhVzdTVXBZV3hSTDdvc0xBUFo4VFMvNURIL3V6NFBMaExRZWFISkFlclpB?= =?utf-8?B?VG5OdHFIRzVaR2p4ZC9VZ1pxUS9LL0lCckdodXJkdHZRRjNNNlpDeDVMR1BM?= =?utf-8?B?UEhwTkk2cDRVVkUwRlB4SlFhZm5FcjBGK3VMMzk1YlpPblhrZ2FoajFDSGt5?= =?utf-8?B?QTFmMXhQZkV1SXJlV0FMeWpMOGJEdzd5ZjE0MGhTRDlxcWlRei9mNlFWVkxB?= =?utf-8?B?cEpEbWlJaVBvbS9tMEwwVm0zS2ZRRm5CQkhCUENSeTRrZDFEOW5iSENTVDhx?= =?utf-8?B?WW5OR213ZnZsa3BTbkFqYTdZc1dYYlcrTVFqbmhaOFpDN242NjFqbTBHRjRj?= =?utf-8?B?NGY5OVlTZGZuT0NQK0tnMGdxOFB4ODdYVHUyckdqNXB6Sm03cnpPbGppYTVt?= =?utf-8?B?M0VrR1B6OXFnNnZ0U2lhWmYrOWsweXdLellUL21NZ09GMXpOYUpNVHloVGVS?= =?utf-8?B?MFpwTVhNWWZqMU1lMDBMYWl2T1hrb2Q1Y09GR0h0TmkwY0JnWUNOeVRMbkVR?= =?utf-8?B?ZkNDSzdpYWdqT0c0c1lROFJNYTZwU2hFbDZyNEJxWE1NVFNDT1pDaUFVRnlG?= =?utf-8?B?RU1QWldGQVU5QVNQZk5UQ1J3OEhFT1B2dXUyT0VYdUtDMnZRai94b3pmellQ?= =?utf-8?B?RzJqNnRnV3NpNUlsdHpPVm5RY0d1TDh2bWw2QjV5ZEk4QkZsdW5wckVKc2F1?= =?utf-8?B?RmI4bTV2WDF5dGxUbFYyVjVLT0hkQ2JJSjErd1NTMi9GL0JxSmhOMk5BT0l1?= =?utf-8?B?Y2YrQkRFeG8vNFNCSTVJVDc3ZEZEMnE0MmhwMmg4SjA3UjNZVnoxZ2huRE9a?= =?utf-8?B?VkxWamNEZmIwY2x6VEdzcWY1Y0NhWGFJS0hTaTZnPT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <050686D063EB3F478BB9CDE67AA2DD83@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e0ea76a1-89d7-4345-dcef-08d8c4862997 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jan 2021 18:46:17.4475 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NTcrwLI22XsFTs3/+UFid2a9OMsBFVPX4YOVc/cfgxOh13t5wSz6BPUKpp7hzC9FmGLco96R6DIr0mCrL0onTg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3213 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gRnJpLCAyMDIxLTAxLTI5IGF0IDEzOjU3ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAyMSBKYW4gMjAyMSwgYXQgMDY6MjEsIE1pY2hhZWwgUGFxdWllciA8bWljaGFl bEBwYXF1aWVyLnh5ej4gd3JvdGU6DQo+ID4gSSByZWFsbHkgbmVlZCB0byBzdHVkeSBtb3JlIHRo ZSBjaG9pZGUgb2YgdGhlIG9wdGlvbnMgY2hvc2VuIGZvcg0KPiA+IE5TU19Jbml0Q29udGV4dCgp Li4uICBCdXQgYmFzZWQgb24gdGhlIGRvY3MgSSBjYW4gcmVhZCBvbiB0aGUgbWF0dGVyIEkNCj4g PiB0aGluayB0aGF0IHNhdmluZyBuc3Njb250ZXh0IGluIHBnX2NyeXB0b2hhc2hfY3R4IGlzIHJp Z2h0IGZvciBlYWNoDQo+ID4gY3J5cHRvaGFzaCBidWlsdC4NCj4gDQo+IEl0J3MgYSBzYWZlIGJ1 dCBzbG93IG9wdGlvbiwgTlNTIHdhc24ndCByZWFsbHkgbWFkZSBmb3IgcnVubmluZyBhIHNpbmds ZSBjcnlwdG8NCj4gb3BlcmF0aW9uLiAgU2luY2Ugd2UgYXJlIG9wZW5pbmcgYSBjb250ZXh0IHdo aWNoIGlzbid0IGJhY2tlZCBieSBhbiBOU1MNCj4gZGF0YWJhc2Ugd2UgY291bGQgaGF2ZSBhIHN0 YXRpYyBjb250ZXh0LCB3aGljaCBpbmRlZWQgc3BlZWRzIHVwIHByb2Nlc3NpbmcgYQ0KPiBsb3Qu ICBUaGUgcHJvYmxlbSB3aXRoIHRoYXQgaXMgdGhhdCB0aGVyZSBpcyBubyBnb29kIGNhbGxzaXRl IGZvciBjbG9zaW5nIHRoZQ0KPiBjb250ZXh0IGFzIHRoZSBiYWNrZW5kIGlzIGNsb3NpbmcgZG93 bi4gIFNpbmNlIHlvdSBhcmUga25lZWRlZXAgaW4gdGhlDQo+IGNyeXB0b2hhc2ggY29kZSwgZG8g eW91IGhhdmUgYW55IHRob3VnaHRzIG9uIHRoaXM/ICBJJ3ZlIGluY2x1ZGVkIDAwMDggd2hpY2gN Cj4gaW1wbGVtZW50cyB0aGlzLCB3aXRoIGEgY29tbWVudGVkIG91dCBkdW1teSBzdHViIGZvciBj bGVhbmluZyB1cC4NCj4gDQo+IE1ha2luZyBuc3NfY29udGV4dCBzdGF0aWMgaW4gY3J5cHRvaGFz aF9uc3MuYyBpcw0KPiBhcHBlYWxpbmcgYnV0IHRoZXJlIGlzIG5vIGdvb2Qgb3B0aW9uIGZvciBj bG9zaW5nIGl0IHRoZXJlLiAgQW55IHRob3VnaHRzIG9uDQo+IGhvdyB0byBoYW5kbGUgZ2xvYmFs IGNvbnRleHRzIGxpa2UgdGhpcz8NCg0KSSdtIGNvbXBsZXRlbHkgbmV3IHRvIHRoaXMgY29kZSwg c28gdGFrZSBteSB0aG91Z2h0cyB3aXRoIGEgZ3JhaW4gb2YNCnNhbHQuLi4NCg0KSSB0aGluayB0 aGUgYmFkIG5ld3MgaXMgdGhhdCB0aGUgc3RhdGljIGFwcHJvYWNoIHdpbGwgbmVlZCBzdXBwb3J0 IGZvcg0KRU5BQkxFX1RIUkVBRF9TQUZFVFkuIChJdCBsb29rcyBsaWtlIHRoZSBOU1MgaW1wbGVt ZW50YXRpb24gb2YNCnBndGxzX2Nsb3NlKCkgbmVlZHMgc29tZSB0aHJlYWQgc3VwcG9ydCB0b28/ KQ0KDQpUaGUgZ29vZCg/KSBuZXdzIGlzIHRoYXQgSSBkb24ndCB1bmRlcnN0YW5kIHdoeSBPcGVu U1NMJ3MNCmltcGxlbWVudGF0aW9uIG9mIGNyeXB0b2hhc2ggZG9lc24ndCBfYWxzb18gbmVlZCB0 aGUgdGhyZWFkLXNhZmV0eQ0KY29kZS4gKFNob3VsZG4ndCB3ZSBuZWVkIHRvIGNhbGwgQ1JZUFRP X3NldF9sb2NraW5nX2NhbGxiYWNrKCkgZXQgYWwNCmJlZm9yZSB1c2luZyBhbnkgb2YgaXRzIGNy eXB0b2hhc2ggaW1wbGVtZW50YXRpb24/KSBTbyBtYXliZSB3ZSBjYW4NCmltcGxlbWVudCB0aGUg c2FtZSBnbG9iYWwgc2V0dXAvdGVhcmRvd24gQVBJIGZvciBPcGVuU1NMIHRvbyBhbmQgbm90DQpo YXZlIHRvIG9uZS1vZmYgaXQgZm9yIE5TUy4uLg0KDQotLUphY29iDQo=