Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kaIcL-00019z-BL for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Nov 2020 13:14:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kaIcK-0001UI-1w for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Nov 2020 13:14:24 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kaIcJ-0001Tv-RX for pgsql-hackers@lists.postgresql.org; Wed, 04 Nov 2020 13:14:23 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kaIcD-0007kK-Kp for pgsql-hackers@lists.postgresql.org; Wed, 04 Nov 2020 13:14:22 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id D368010C6598 for ; Wed, 4 Nov 2020 14:14:13 +0100 (CET) Received: from s645.loopia.se (unknown [172.22.191.5]) by s807.loopia.se (Postfix) with ESMTP id B35192E3110B; Wed, 4 Nov 2020 14:14:13 +0100 (CET) Received: from s474.loopia.se (unknown [172.22.191.6]) by s645.loopia.se (Postfix) with ESMTP id A5CB81579F98; Wed, 4 Nov 2020 14:14:13 +0100 (CET) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1 X-Spam-Level: X-Spam-Status: No, score=-1 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1] autolearn=disabled Received: from s645.loopia.se ([172.22.191.5]) by s474.loopia.se (s474.loopia.se [172.22.190.14]) (amavisd-new, port 10024) with LMTP id fUNBwkCRtTsV; Wed, 4 Nov 2020 14:14:13 +0100 (CET) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.193 Received: from [192.168.72.43] (customer-89-255-232-193.stosn.net [89.255.232.193]) (Authenticated sender: daniel@yesql.se) by s645.loopia.se (Postfix) with ESMTPSA id 013961579F8A; Wed, 4 Nov 2020 14:14:12 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\)) Subject: Re: Support for NSS as a libpq TLS backend From: Daniel Gustafsson In-Reply-To: <89a6fa41-10fa-06c7-19c6-4f1dc1a9b123@dunslane.net> Date: Wed, 4 Nov 2020 14:14:12 +0100 Cc: Andres Freund , Postgres hackers , Michael Paquier , Andrew Dunstan , Stephen Frost , Thomas Munro Content-Transfer-Encoding: 7bit Message-Id: <4069EDBF-11BF-49E4-AF18-1A859157BAEF@yesql.se> References: <20200904012334.GF19499@paquier.xyz> <20200917074134.GX2873@paquier.xyz> <20200929055939.GF7117@paquier.xyz> <411593A7-E037-474D-BFD7-D3D6683C1D46@yesql.se> <20201020191529.5yverw3ybaube3pg@alap3.anarazel.de> <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> <20201028063957.cvln377jgao33ssu@alap3.anarazel.de> <994d5fdb-16ff-bb8b-c29f-8bc9f809208c@dunslane.net> <977041A2-0103-4150-8174-FB77F6C238A2@yesql.se> <89a6fa41-10fa-06c7-19c6-4f1dc1a9b123@dunslane.net> To: Andrew Dunstan X-Mailer: Apple Mail (2.3445.104.15) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk > On 2 Nov 2020, at 15:17, Andrew Dunstan wrote: > We could generalize that saving mechanism and do it if any module > required it. But instead of testing against a different branch, we'd > test against a different animal. So we'd have two animals, one building > with openssl and one with nss, and they would test against each other > (i.e. one as the client and one as the sever, and vice versa). That seems like a very good plan. It would also allow us to test a backend compiled with OpenSSL 1.0.2 against a frontend with OpenSSL 1.1.1 which might come in handy when OpenSSL 3.0.0 lands. > This would involve a deal of work on my part, but it's very doable, I > believe. I have no experience with the buildfarm code, but I'm happy to help if theres anything I can do. cheers ./daniel