Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCBEb-0008Je-R4 for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Feb 2021 01:02:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lCBEa-0003YR-L0 for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Feb 2021 01:02:28 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCBEa-0003Y5-5q for pgsql-hackers@lists.postgresql.org; Wed, 17 Feb 2021 01:02:28 +0000 Received: from mail-dm6nam10on2061.outbound.protection.outlook.com ([40.107.93.61] helo=NAM10-DM6-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCBER-0006iy-UP for pgsql-hackers@lists.postgresql.org; Wed, 17 Feb 2021 01:02:27 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=htpZaVM3dTlJsUFDwtq/Rm2EVGvlIwV+h8aMug619+2V1y2prqUdDd5Jkt3r3KLA3+jRBNhaRhSpyzcLxGKZxCSmhnMcii//B8EJjGjY9XFM1AAVCvTlQq+/XhFTK9o1beYz0lzkfebwxY6uNbpcoF4u0As8XqNDqwiGyJ7HN/BKz7TECvydgcyLbgJor28CrPAi7gntIii9TqN+3WHzvdeiC7NrXdb6aDw3EJps9w/ddqH98vigiCnkLw+3lyXf40+e1Bx1p0fjYoE8iJQ9jkJRQFzSeUpRHXOSyW1/0lF4a+0C/HujjKT/8bUv8pWjHcG1/TrYRwvDn9fQUsz5Zw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I3d1+uGRf1RBx6j5L1idpd857abJNV+UD638knRj/v4=; b=RKzVheNhv+RRhNiEwBvUvRjY4DOd1tJkLUx/7YS0Vwi4kXDNERHRVTvXFZtfjsJg4sjsj72y2JNsxn3tSCSs7csRP8QzKk6FvtyevQiTvy9LUnmktzYr3+0pVMgsiwL3DOzu5Fl1wSfqC+7LHfF5o1lB5jhN/OOYWul/4pFxtuX30Z6LCuxAAGcFNHmK5kfpTQvPfvWSwG/uE294gq+vjBks7orTk0yKolCRyvsbjPbSH0gJNuAOObv0NVrTOfxYDCWZZ9xgynnCgE97NIcPFbB3BGU0KGNutLM+sdE2X+jmNjgRV4sP6VVGdNOt09rJNuAvR25ESMXsdFTNgY+Bew== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I3d1+uGRf1RBx6j5L1idpd857abJNV+UD638knRj/v4=; b=jyBAFZqChkgiAxkAHP7u+gQjaarNJYZzrBT2dBk/7iHRpVhyoF01aylZ5bCVbSv6zIyVR1M8KmhjMB6ed0EHBjxPV7dftos9pqdSvnFpDhhgrr+VbeZguy+ClrMXOSGIOYG1fwxMf85Vy5+x6+vaFl36Er6s3xk0Fz1CzXmGHNI= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO6PR05MB7762.namprd05.prod.outlook.com (2603:10b6:5:346::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.11; Wed, 17 Feb 2021 01:02:16 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3868.027; Wed, 17 Feb 2021 01:02:15 +0000 From: Jacob Champion To: "daniel@yesql.se" , "thomas.munro@gmail.com" CC: "pgsql-hackers@lists.postgresql.org" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46jppuyAgAxS7QCACpBtgIACrTAAgAZM+gCAB0o1gIFMW7EA Date: Wed, 17 Feb 2021 01:02:15 +0000 Message-ID: <4b4e3a27cc56921d2acba2c25823fd2fc325b842.camel@vmware.com> References: <3D2C67F8-7EE6-4534-BE8A-BDD828562672@yesql.se> <383EE7EE-ADEE-4C48-8E7B-28B361E5EA3B@yesql.se> <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> In-Reply-To: <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d2c6979d-fcb2-42b7-f8df-08d8d2dfab05 x-ms-traffictypediagnostic: CO6PR05MB7762: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(396003)(346002)(366004)(376002)(136003)(39860400002)(110136005)(86362001)(26005)(2906002)(76116006)(478600001)(66556008)(64756008)(66476007)(8676002)(66946007)(186003)(71200400001)(54906003)(316002)(5660300002)(6486002)(4326008)(8936002)(6506007)(2616005)(6512007)(36756003)(66446008);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?Ly9uMXI3MDVYZEQwSXFrb2cxdVdaaUdHMTBkQTZuNUlacWVJU0xCMnZPL0lQ?= =?utf-8?B?L0tWOEQrTS92NHJXWnFobzJJaUY3OHN4TU00Mzh3QmdwMjVzaDIxYldRdGw2?= =?utf-8?B?TnpPNnVWSHY4Vi9KVis3RFhrdzA3T0NmakRTS0IwcEZCZ2NNcHgvUzk0bDVZ?= =?utf-8?B?THRrZUplMUdjZTg5VE9pOEJVcUtZaS82MFFqRmtuTGJtNksvRkpVS05UOFRh?= =?utf-8?B?WUpSbXBubjB1Q29QekhRVVd0eURJcUV0L280VGh6Qk11aFlqRW1qVVF4aGpq?= =?utf-8?B?QS9Vazh1ck1qOXBsWEhVNkVBNE1DN2Z6Nk1iNjZHeUdaYWNIb2FHam4zcVZl?= =?utf-8?B?TmRzZ25rZzNub2hUSlkrTFI3cXpvVENBY2IzNlJxTklKQlFqZXFiVzZXUmEz?= =?utf-8?B?NloyVGYrMjVlNTJKdGcybVh4OEtUdHRsVExHdjczQnM5NjYvQkVXUEdVWi9M?= =?utf-8?B?ZXJjTFlWcG9YK2txWHZWaHI5Z3JvQSsxOUp3aFFkR0dQbFJoMEozQU9qaUVK?= =?utf-8?B?K2xkWXhMT0RkdTlSRkRhUFJCQmZLa2MzZW10ZXBnR3ZESkxiRHkwMW03THp2?= =?utf-8?B?cUw2QVMwRHdzV1gvbDE4R0RrQ25rMHRGUjR5YjVzM0NIN3EwbitFR2QzbUZS?= =?utf-8?B?eTJ3UktTTXlDdTJrVGN2dXU3eVdGR2N0VEVNbmQ4KytIcFhFWW1TYmZob2cx?= =?utf-8?B?MER6ZVJRZUdFdWQ5N2tuQ0dlTEZZUkxWNHNycTdKREk4MFdaLzluemxrR3Ar?= =?utf-8?B?TXhjZ3JmYy9nV2ZtdzhpWGFXYUIvdmFUM2dVWXpnaE1ERDh2SFQ3QU4zMVdI?= =?utf-8?B?RkpxMU5QdDJUckJUVmNJdm45QjJLZ29odVhhU29vdjZWWDl3UGJJVkEyS0Fk?= =?utf-8?B?Y01KSm1PWm9nWEQrVkVvaFNSQTBaSEVMWjdhSEF6OHpxeDNaOW9keGpZTXpu?= =?utf-8?B?cysrRVFkNDRMWWRLU2pVMkkwZitSWFJ5YnBhWVVRbFNFZlNCTUNyM3FqWmFk?= =?utf-8?B?ckF5MGROUENSRWZxVjUraUZlMlBib292NXhHQlJEZEc5aytLZkNRRnZqSVJQ?= =?utf-8?B?aGVDM0N4UnZnMWdMVHNlcmkybnF1QjFiMnBaWDc2Z2xTMHdMRkJNTlNaSmU5?= =?utf-8?B?Rk1oTUxmMDMxSzBkN1hjNVBNZUpiMzd5bEM3MWttc2I0elUxd01SSCtKbDJm?= =?utf-8?B?NGg2WUkvUzlqcmFtbmxkZjNabU9aTDliTWI2QXJibUdtQXRLaHJjZUY0TUNy?= =?utf-8?B?ZkNuNGJSVFNENjFpNW40a2t1eXRNM0tNbWVPdGFoZ2tKU1dzREVlcmc4aXl0?= =?utf-8?B?SWlqOG83ZUx6T3R6VnhVUGlVbkM0RlFMcFRKMlpzTjVTQ1daOCtJandITWd0?= =?utf-8?B?ZmQ3WjJVaW5NQThlWnB5anpFNU1ieGhOcmx1SjY2ZXRJdGlpa3ZHVFFnUXI5?= =?utf-8?B?Nis1TUU0U0hXZXM3amIrdmd1RmpCR3g0NER2akFyK0FBNTFDUGRpQWNpSmkv?= =?utf-8?B?WmcydTFkcytXTE45TjNaVW1qb0s2QmVuSmc0MzFDcHZYdlZVNEVHSzBmbEdU?= =?utf-8?B?bzUvbkpPYjRtaXRkT0g3RlRZTjF2cmFXTzAyYUhyZEFGZDBDTys5eEYvUW9r?= =?utf-8?B?Y3VDcG54b1BLd0lQNEZEaG5zUGdPODRONjV4MjFIQzk0OVpvWjhzQ1EraUNm?= =?utf-8?B?c25tN2JBS0ZVSTVIZHd2ZXdJam96UkV2V1BDTmtzMHN6dGExWWpCQUZiUHYz?= =?utf-8?Q?ew5/u8TG/Y2f6NK+B4WGuvD2mn9zyrEJS/oYgL+?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <26C8042F49685D47A928910161F392A4@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d2c6979d-fcb2-42b7-f8df-08d8d2dfab05 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Feb 2021 01:02:15.6522 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ekswLvKrYYXtxf97JcNDdT00qPA7ZC01hJw5DWEoV8t6b2ynPgIhgMbkPml9GI4QlDCPQgoGBNkDj07zb5aEQA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR05MB7762 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gTW9uLCAyMDIwLTA3LTIwIGF0IDE1OjM1ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gVGhpcyB2ZXJzaW9uIGFkZHMgc3VwcG9ydCBmb3Igc3NsaW5mbyBvbiBOU1MgZm9yIG1v c3QgdGhlIGZ1bmN0aW9ucy4NCg0KSSd2ZSBwb2tlZCBhcm91bmQgdG8gc2VlIHdoYXQgY2FuIGJl IGRvbmUgYWJvdXQgdGhlDQp1bmltcGxlbWVudGVkIHNzbF9jbGllbnRfZG5fZmllbGQvc3NsX2lz c3Vlcl9maWVsZCBmdW5jdGlvbnMuIFRoZXJlJ3MgYQ0KbmFzdHkgc291cCBvZiBzcGVjcyB0byB3 YWRlIGFyb3VuZCBpbiwgYW5kIGl0J3Mgbm90IHJlYWxseSBjbGVhciB0byBtZQ0Kd2hpY2ggb25l cyB0YWtlIHByZWNlZGVuY2Ugc2luY2UgdGhleSdyZSBtb3N0bHkgY2VudGVyZWQgb24gTERBUC4N Cg0KTXkgdGFrZSBvbiBpdCBpcyB0aGF0IE9wZW5TU0wgaGFzIGRvbmUgaXRzIG93biB0aGluZyBo ZXJlLCB3aXRoIGFsbW9zdC0NCmJhc2VkLW9uLWEtc3BlYy1idXQtbm90LXF1aXRlIHNlbWFudGlj cy4gTlNTIGhhcyBubyBlcXVpdmFsZW50cyB0byBtYW55DQpvZiB0aGUgZmllbGQgbmFtZXMgdGhh dCBPcGVuU1NMIHN1cHBvcnRzIChlLmcuICJjb21tb25OYW1lIikuIExpa2V3aXNlLA0KT3BlblNT TCBkb2Vzbid0IHN1cHBvcnQgY2FzZS1pbnNlbnNpdGl2aXR5IChlLmcuICJjbiIgaW4gYWRkaXRp b24gdG8NCiJDTiIpIGFzIG1hbnkgb2YgdGhlIHJlbGV2YW50IFJGQ3MgcmVxdWlyZS4gVGhleSBk byBib3RoIHN1cHBvcnQNCmRvdHRlZC1kZWNpbWFsIHJlcHJlc2VudGF0aW9ucywgc28gd2UgY291 bGQgdGhlb3JldGljYWxseSBnZXQgZmVhdHVyZQ0KcGFyaXR5IHRoZXJlIHdpdGhvdXQgYSBodWdl IGFtb3VudCBvZiB3b3JrLg0KDQpGb3IgdGhlIGZldyBhdHRyaWJ1dGVzIHRoYXQgTlNTIGhhcyBh IHB1YmxpYyBBUEkgZm9yIHJldHJpZXZpbmc6DQotIGNvbW1vbiBuYW1lDQotIGNvdW50cnkNCi0g bG9jYWxpdHkNCi0gc3RhdGUNCi0gb3JnYW5pemF0aW9uDQotIGRvbWFpbiBjb21wb25lbnQNCi0g b3JnLiB1bml0DQotIEROIHF1YWxpZmllcg0KLSB1aWQNCi0gZW1haWwgYWRkcmVzcyhlcz8pDQp3 ZSBjb3VsZCBoYXJkY29kZSB0aGUgbGlzdCBvZiBPcGVuU1NMLWNvbXBhdGlibGUgbmFtZXMsIGFu ZCBqdXN0DQp0cmFuc2xhdGUgbWFudWFsbHkgaW4gc3NsaW5mby4gVGhlbiBsZWF2ZSB0aGUgcmVz dCB1cCB0byBkb3R0ZWQtZGVjaW1hbCANCk9JRHMuDQoNCldvdWxkIHRoYXQgYmUgZGVzaXJhYmxl LCBvciBkbyB3ZSB3YW50IHRoaXMgaW50ZXJmYWNlIHRvIGJlIHNvbWV0aGluZw0KbW9yZSBnZW5l cmFsbHkgY29tcGF0aWJsZSB3aXRoIChzb21lIGFzLW9mLXlldCB1bnNwZWNpZmllZCkgc3BlYz8N Cg0KLS1KYWNvYg0K