Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l7jTf-0006ma-Pk for pgsql-hackers@arkaria.postgresql.org; Thu, 04 Feb 2021 18:35:40 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l7jTd-0005uL-A3 for pgsql-hackers@arkaria.postgresql.org; Thu, 04 Feb 2021 18:35:37 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l7jTc-0005uE-S8 for pgsql-hackers@lists.postgresql.org; Thu, 04 Feb 2021 18:35:37 +0000 Received: from mail-bn8nam12on2056.outbound.protection.outlook.com ([40.107.237.56] helo=NAM12-BN8-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l7jTY-0000ll-Tw for pgsql-hackers@lists.postgresql.org; Thu, 04 Feb 2021 18:35:35 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=odIyY+jSuhhF50c3S+dj8bgevkcVf0VyIX0pqbosyv8hDmCcSOqk1OQBIaML56hg1lCbcimoHtfQGGzFziX8HtoLa5PFJ2IIer3hjcDdSZ/oVNu+sGyAvIzqPXVsKj0mGQPpZVL91OuEfYmkH8pcekalSr1IgTXcqPsP2ipAUJdyovJYnLnzmGTrfwjf+l66S1reYpSDZYlw2LC4p3oqaOYChZuROsUVHCJth5NbY1J6NHgNXaTdyUH/iVCBUw0aeKUGSmrhrVsmYu+/4R4hwGDhaYDkGjemhIVimyGFD4KGgZ34CEwO2nvi2bX+Y8QI6bGfIyMgm39Xf1lFoWAvgA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1s25vHJhlRZCvTRNXToQgMdMLgx04pF8wLthw4w5nsw=; b=MHCfyJu84VNbw5GiOHyRg/BeYuF+0yihwuuHsWXV7rf2xuelqfzJ/Tan1q7/ZnwfPtgvA+I+YfxcmQ6UVOk32yVY6KcSGzTgX6U4Jq4LjOjC3gFV8eQqEB9dNGfufIPQ6QVnTWaQBHCToIZ2PXXXTH+cVkFqFh9HzUwMEpvPHfhodDEGOwtxpvKfIpxbNPY99E1kGQRooa3ZqgLeJep8LrlL6+4gaA6jaHM9EU+KvfjwX5DYOi2ahSoriNBvjVXgUqtHvinEn7a1wfApd7CmqBT7I1ddud+6v5AOi3wmqxWxmAXPB8KbM9xyPEyjuHQDOzAsSCYjH/bHf8pRzaWbzA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1s25vHJhlRZCvTRNXToQgMdMLgx04pF8wLthw4w5nsw=; b=MjOKXg0O83gZeHgUvFL8hW7XxEtXcU9E3Pd8pCxLi6f+3V4oWlxDAWPgoSa6gXJrXM+mF9Z4QqWjFLST5LB7Y7IL7BuMnXU7jkmzQeBperog8gMfbMWHXzMQGVuKa5VeH9jrc2bs2Zsre+cGeAos46uM2CkMbop/JYQW0WTH/uY= Received: from (2603:10b6:300:65::20) by MWHPR0501MB3740.namprd05.prod.outlook.com (2603:10b6:301:76::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.8; Thu, 4 Feb 2021 18:35:28 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3825.017; Thu, 4 Feb 2021 18:35:28 +0000 From: Jacob Champion To: "michael@paquier.xyz" CC: "daniel@yesql.se" , "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAAucGA Date: Thu, 4 Feb 2021 18:35:28 +0000 Message-ID: <40b9dd923a3021e5f17b4444a0bb6485098986d6.camel@vmware.com> References: <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> <8D7F95DB-8F8A-4300-BFDA-656FBAB30FE2@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: paquier.xyz; dkim=none (message not signed) header.d=none;paquier.xyz; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 997d2dc9-89c8-46e2-e181-08d8c93ba55c x-ms-traffictypediagnostic: MWHPR0501MB3740: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(366004)(39860400002)(346002)(376002)(396003)(6916009)(83380400001)(8676002)(6512007)(66556008)(54906003)(66446008)(8936002)(64756008)(6506007)(4744005)(86362001)(6486002)(71200400001)(76116006)(478600001)(5660300002)(66476007)(2906002)(2616005)(36756003)(4326008)(66946007)(186003)(316002)(26005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?SnN5bVc1ajB0L2ZrWnVOMmVPcWV3WVZDNER4UzZkOGZOLzdkWmdvdzJjSm5t?= =?utf-8?B?aGt6OEQ1aUIvaGl4NktMa3l0LzRjamVkS0RXZlZ3ajZ3RlBLaVQxL1dMMXBO?= =?utf-8?B?NGpVRTVjTUlmZFlnVkg4dS9adk1tbWhVcklXV3dnVTYxSmgvckEwZmNQNEti?= =?utf-8?B?SGI2amZWNWdjUXBRRVFtTktieGVPZGR5R0dPd1NDQVRVV1hzSE1Fd0FxK1cx?= =?utf-8?B?RWQ3UG9kVzZ3ZGJ4TTJqVTdxMitXRFRydnkxQ2cyRFlyZUtlRGhZd09mRUxz?= =?utf-8?B?RjhiRE1nUzRPWGFXSEJsUFJXMjEvUW5NdWY0MXdiTzU3UHZtaTR2MjRwVmor?= =?utf-8?B?MURteFZjOHhvL2hQUzJGMWEyVUZxOXRtbEhYNWFYeTBrcDdqb2pVV0VZdFI0?= =?utf-8?B?aTZmOUg1alkyUDV0R280TmIrRVZQUGw0S2hUZksxZ3Bma2FmQ0NoUmhvYXdx?= =?utf-8?B?Rnk0S3cwMmZuaTRTWGFXbEpJd054ZHZkZ2c0VjI3eG1sMVoxOUVVdzlrb0dv?= =?utf-8?B?aW5BSlJvTHVwTllDOFhqS0FHNTdncmhlenB3U3VXVXpVWXI0WWk4UFpFeERw?= =?utf-8?B?ZmF6Z1p4YUVlQ3gzNm9kQXQ2VnFmRWVtTkUrNjZZYTJacVpOTXNlNWNMMDdO?= =?utf-8?B?cEVxckR3OFdnN2N4RjFKcUZkZlY3YlFTT2VCM25iczN3Mmc3QTZ1MUxQaDBF?= =?utf-8?B?RGNYOEFOTkhISnZXLzYyblo3UFQvQXkvaW1QQzdYcU0wWkVIWlQ5SmFLMENl?= =?utf-8?B?WnNybDFYMUZTOFFGUHhRaE5RU0tCRVBuZGsveEIxR2ZJT2FzckkrV2JlQWVM?= =?utf-8?B?TVhSN214UE4zZ0IzWklaMlFySVlLQ1BBTFZyTFNvd0ZNTXZhS0Evd1Q3cm1l?= =?utf-8?B?U2h2KzAvUUtRalREMGs3Z29jZkZISEpXZElCc0Q4NWg3TVlZT3hYYVh0Zlg3?= =?utf-8?B?ak1yWnYvZCsyUHFMYmNSc21sTTFkZytTUUhtb1ZWMWxGaFg4M3hvazhZMFRT?= =?utf-8?B?VjJGUm9IZHlRa2duaUl6OU5mMjNGZzllNmhZOEozUUFKbnBaVU1ZSTVRZ0RC?= =?utf-8?B?cllBT01DTVlYMk1uV2dFMlRPTmV4NVF6WFZZU0paMjEyTVozOFYzcjhRWlg5?= =?utf-8?B?WXNQa0JRM2l1cnEwNE1mSy84alRvZ0ZTa2pKdG5MVXRpd2Vtek1CVGphSFVz?= =?utf-8?B?OHY5Skt4aVVRVVZBVEJsVDh6dW00WjV6cnFVTC9oRG1ZdS9uc3lSMlc5S2dG?= =?utf-8?B?Q3FWYkxkdlNsU04vamxXdFNWeDF1eEJUQXN2azdRYVZiS25JU2NkUm5sWlV2?= =?utf-8?B?ZXVyTnJSdGZKbk1Da2RvbWt1QlA4Q0lUaFN3dmx5ZXRBY2VDOFRacnJuYmI1?= =?utf-8?B?ODdVTU5MRlVjTjloaDJwN0hjTnVhYVJwdmhrN082aVBKNG1WL09oZ3NHdktY?= =?utf-8?B?cnYxKzFOK28vckU5WGhVZ0xZMmhpKzFRZWQ5OFNBPT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 997d2dc9-89c8-46e2-e181-08d8c93ba55c X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Feb 2021 18:35:28.6496 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: BAmLQGtKBpAdUp30pzBL+EcxIZ3eyIA+eLJ05Fse3QgIrab1X7rigXzrEum7BkUV1+BZ7YAHkfSG1sWQ/6FF8Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR0501MB3740 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gVGh1LCAyMDIxLTAyLTA0IGF0IDE2OjMwICswOTAwLCBNaWNoYWVsIFBhcXVpZXIgd3JvdGU6 DQo+IE9uIFR1ZSwgRmViIDAyLCAyMDIxIGF0IDA4OjMzOjM1UE0gKzAwMDAsIEphY29iIENoYW1w aW9uIHdyb3RlOg0KPiA+IE5vdGUgdGhhdCB0aGlzIGNoYW5nZXMgdGhlIGVycm9yIG1lc3NhZ2Ug cHJpbnRlZCBkdXJpbmcgdGhlIGludmFsaWQtDQo+ID4gcm9vdCB0ZXN0cywgYmVjYXVzZSBOU1Mg aXMgbm93IHNlbmRpbmcgdGhlIHJvb3Qgb2YgdGhlIGNoYWluLiBTbyB0aGUNCj4gPiBzZXJ2ZXIn cyBpc3N1ZXIgaXMgY29uc2lkZXJlZCB1bnRydXN0ZWQgcmF0aGVyIHRoYW4gdW5yZWNvZ25pemVk Lg0KPiANCj4gSSB0aGluayB0aGF0IGl0IGlzIG5vdCBhIGdvb2QgaWRlYSB0byBhdHRhY2ggdGhl IHNpbmNlLXYqLmRpZmYgcGF0Y2hlcw0KPiBpbnRvIHRoZSB0aHJlYWRzLiAgVGhpcyBjYXVzZXMg dGhlIENGIGJvdCB0byBmYWlsIGluIGFwcGx5aW5nIHRob3NlDQo+IHBhdGNoZXMuDQoNCkFoLCBz b3JyeSBhYm91dCB0aGF0LiBJcyB0aGVyZSBhbiBleHRlbnNpb24gSSBjYW4gdXNlIChvciBsYWNr IHRoZXJlb2YpDQp0aGF0IHRoZSBDRiBib3Qgd2lsbCBpZ25vcmUsIG9yIGRvZXMgaXQgc2NhbiB0 aGUgYXR0YWNobWVudCBjb250ZW50cz8NCg0KLS1KYWNvYg0K