Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5IF3-0001Gc-IA for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Jan 2021 01:06:29 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l5IF2-0004QC-Eo for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Jan 2021 01:06:28 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5IF1-0004Q5-PJ for pgsql-hackers@lists.postgresql.org; Fri, 29 Jan 2021 01:06:28 +0000 Received: from mail-eopbgr770058.outbound.protection.outlook.com ([40.107.77.58] helo=NAM02-SN1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l5IEy-0008EL-Qe for pgsql-hackers@lists.postgresql.org; Fri, 29 Jan 2021 01:06:26 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ae1C8ive7T3yYzuCvK6UFjmQ99oPkg1LQRkqDtNXsjTQ8gCgK1zJnL5gggT7dBDmBHnzNZFxENyTNmjgukNXz99Thwx2GNJWCyz10HghY8EwVwZjQgg5H4hi7eiPCQYYpADNgHkJA0a7Rski4eVgdgV5Jqf9SfldrDon/zu4dH37vAKE4Es31MjW1dUbRzOLo93Hl1yyadrX2Sp2Wb5jfGciX8OQ4u+S++zez9XNYJpxQh4cuiug3Wms8Uaso0e1S8ZZuQoq4EufEdfnz43+PxCmy/2MSanLMIV4yXvPuuYZeSqkRpaYWEP3GXqtyIc7Oear67t768p5E+ss+Q4Pgg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2hp0GUQikohUoP0ibS80+GJGA5G20nBa3PrgeiSTwZo=; b=Mijt56yuk+JBwPG9ntwRbRouKXVpQEPf9e1NR8bPRdKt/KBXOa8miFnOTm9UrmGR9urUphwnEjcPr9P/9P4yWxWvKgrWl6KBdQGWdaDLoubK+00aviC44fpiEf3tN1urg0hsIVOWgiLfNhboBHGMG4zEqY+KPjBsRTLOEtDWZx6q7rXEgijp0BPOLsDSkPvogtcAM9KoSi6k160FATWA+zDZKjs5e03+cCZOXk5h+38JmrFstJ5jh6TIvDm6VHynGYJG6eERP5DUM4I37G8JC49x0xTv+NY60ltle4vUkvbML6jpwuPF309dy1L1/rcBV5sFx9V2Fc70BUR/wj1l/Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2hp0GUQikohUoP0ibS80+GJGA5G20nBa3PrgeiSTwZo=; b=V/8zM0+2siAYm3qeTcvBtwTuSj78tf028xA66jt/37xw5oWjQkWCpTYI4k7r7HVlljfZZyrSCSxAUiTOuPr6n7Hgp3rBPEg3aplYWIhWXgwELsE58BNzelMuQR/U/b219lBVDxP5KP7sgu9hnyrRTaBQ63uISHp1tXJ61wCG7+Q= Received: from (2603:10b6:300:65::20) by CO1PR05MB7878.namprd05.prod.outlook.com (2603:10b6:303:d8::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3805.7; Fri, 29 Jan 2021 01:06:23 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3825.008; Fri, 29 Jan 2021 01:06:22 +0000 From: Jacob Champion To: "daniel@yesql.se" , "thomas.munro@gmail.com" CC: "pgsql-hackers@lists.postgresql.org" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46jppuyAgAxS7QCACpBtgIACrTAAgAZM+gCAB0o1gIEjL1SAgAtRN4A= Date: Fri, 29 Jan 2021 01:06:22 +0000 Message-ID: <4ce630770697cff2e64aa12a815a5ad7f692ab65.camel@vmware.com> References: <3D2C67F8-7EE6-4534-BE8A-BDD828562672@yesql.se> <383EE7EE-ADEE-4C48-8E7B-28B361E5EA3B@yesql.se> <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> <3a4f4f23cb9d8d498c6d901b431f37afa91d82e0.camel@vmware.com> In-Reply-To: <3a4f4f23cb9d8d498c6d901b431f37afa91d82e0.camel@vmware.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 708c39c5-aea6-4472-d8e9-08d8c3f21854 x-ms-traffictypediagnostic: CO1PR05MB7878: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(346002)(136003)(39860400002)(376002)(396003)(366004)(186003)(110136005)(66556008)(316002)(8936002)(76116006)(64756008)(66446008)(2616005)(6512007)(66946007)(8676002)(478600001)(6486002)(4326008)(71200400001)(83380400001)(6506007)(86362001)(36756003)(66476007)(4744005)(2906002)(26005)(54906003)(5660300002);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?RHBMVHFKVmxSMVZyMWo1YkRJWDM5MjE1SUtScEZoaW00cTAxSjJzREI4alVo?= =?utf-8?B?VDQ5b2duREhpdDRQWnRPOHdTQVFjZFE3VU14QTV3QVduVFdRRWdTWEVSWFoy?= =?utf-8?B?SCs3YkdTZ3ZjRTVEQytKems5UmV6WjdlVXpoV1oySWxpUFErN09Ua3dSRFY5?= =?utf-8?B?VEIrTTRlNVpmZnlVME1UUXBvVFpxbStVVWt6Y3dTVWFkVHpMMDhPU0ZFUWdW?= =?utf-8?B?WnR1Sld5VkwvQUxPcG5LMDZTZFREd0paNHZGU29kaXNqaTMzQlBrZGJROUxW?= =?utf-8?B?UkFxNGY3RENDREw4YkVWWU1XQ2plMGViNm5oMlRMbGpBdmlXMmJ2UktCa3RY?= =?utf-8?B?MzJId09sRUxtczlZeUR3dHJXOUY1TGtEVi9zMGJnUllPL3dWQno3UmY2R2ho?= =?utf-8?B?dmsweWpzN3B1STdHUGRZT1M3eG5lZjRzWnQxUTVvbDl5MTU3M2FRZTlOTlY2?= =?utf-8?B?cVY5SUlCRlhWc2I2aGZ2eXVEQkNhbDhGZkNCVFVVWmphTDBhME1hcU45cXFr?= =?utf-8?B?bHV0UGVxZUlXVkdyUkg2NUU1cVJYZmd6eFFtWU5GejNPMVdhT3VvdFpuaTZZ?= =?utf-8?B?Z0JqY1haRW0vKzRzYTdJb213U2tpeGlFSTk2RUxQUDVYbnR6N1d1SThEbjJw?= =?utf-8?B?WmhNb0d5cEJtNjI1aThmQis3Qy90VWxRVGNsYVhVZDdmM0J5d3ZZd3I0TTZC?= =?utf-8?B?U2VQcXNwd2lYSzFEcFBPc1lkZ2hDNktNbklocnNYWStnSEpYWE5sY0dRVzVZ?= =?utf-8?B?UFRFQWIxNzh1bjdrU1YrYkhhSE5CMGpJb3AvQVFHTC8yVGNaVFNKUzlhVkNP?= =?utf-8?B?TTNCTFR2STRrd0pnenVXR1FIMHljUW5vNVh4WVdTa1E2Yjg5bW5MZXE2UVhv?= =?utf-8?B?MlRZYjlNTS9Bd1dSMGJZb3RrS3E2RXpnVmZuclFBeVVHMzcvTzhhQUg1RVZM?= =?utf-8?B?U0dXVng2SWxoL3hMUXQ4cjNqRXRRcEhDNWFCaVI3L0xrbnl6NUY2eGkyb0sr?= =?utf-8?B?dkk0K0l1eUh0d3MwMjc4M0FvM3VYdUZDSC9IM0FiYkd6V1Urb1MyR2ZKdGhl?= =?utf-8?B?bUJ0V1M1dUx2anRDdnNaYmw1QkxHRHVEYjdWWGhpbUdoUXRpNnFFVEdUWiti?= =?utf-8?B?UlRPU1pDSzJVZDA4eDVTQlI1aVpXRkVaVVFqS1VvVEd3bTJuNVBqR2Nsdkk4?= =?utf-8?B?U1E2aGZPb1J3R1B4cHdXWTd0cWg2WXlybENLRHk0VTlvOVhaaFI4bjFlVy9p?= =?utf-8?B?b2piUmx4cWQ1dmZHSmxMeVRxcEY3NG5sRWNyNXhHUmZ5WmtiVFFUa1pYZ0Qx?= =?utf-8?B?ellNT0tLemk5WTh4YkdxcWJjSFNMbklQdDVNeEtrcEZDcXcveXVJRUhuV1kz?= =?utf-8?B?WnRzZmgvSWFOY1RIN1dpWi9jM3VrWGc5b3ZxRTAyYU84c3R5NnJtRWljVWE5?= =?utf-8?B?Ty9mRkhEUmR1dVdpL3h1MW9YTG9RVnR2eGh0Q0lnPT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <28C2C9C610808340A1F89627D82316A3@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 708c39c5-aea6-4472-d8e9-08d8c3f21854 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jan 2021 01:06:22.6032 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: oZXDgbzuX9DyIaZ8YWezRK8DYBYDREFkm9VHaHAPOtuc0VtszyjKcpuXAS7nwZZdP5Pjxy+J+duWK4AwLHzkXA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB7878 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gVGh1LCAyMDIxLTAxLTIxIGF0IDIwOjE2ICswMDAwLCBKYWNvYiBDaGFtcGlvbiB3cm90ZToN Cj4gSSB0aGluayB3ZSdyZSBtaXNzaW5nIGEgY291bnRlcnBhcnQgdG8gdGhpcyBwaWVjZSBvZiB0 aGUgT3BlblNTTA0KPiBpbXBsZW1lbnRhdGlvbiwgaW4gYmVfdGxzX2luaXQoKToNCg0KTmV2ZXIg bWluZC4gVXNpbmcgU1NMX1NldFRydXN0QW5jaG9yIGlzIHNvbWV0aGluZyB3ZSBjb3VsZCBwb3Rl bnRpYWxseQ0KZG8gaWYgd2Ugd2FudGVkIHRvIGZ1cnRoZXIgbGltaXQgdGhlIENBcyB0aGF0IGFy ZSBhY3R1YWxseSBzZW50IHRvIHRoZQ0KY2xpZW50LCBidXQgaXQgc2hvdWxkbid0IGJlIG5lY2Vz c2FyeSB0byBnZXQgdGhlIHRlc3RzIHRvIHBhc3MuDQoNCkkgbm93IHRoaW5rIHRoYXQgaXQncyBq dXN0IGEgbWF0dGVyIG9mIG1ha2luZyBzdXJlIHRoYXQgdGhlICJzZXJ2ZXItY24tDQpvbmx5IiBE QiBoYXMgdGhlIHJvb3RfY2EuY3J0IGluY2x1ZGVkLCBzbyB0aGF0IGl0IGNhbiBjb3JyZWN0bHkN CnZhbGlkYXRlIHRoZSBjbGllbnQgY2VydGlmaWNhdGUuIEluY2lkZW50YWxseSBJIHRoaW5rIHRo aXMgc2hvdWxkIGFsc28NCmZpeCB0aGUgcmVtYWluaW5nIGZhaWxpbmcgU0NSQU0gdGVzdC4gSSds bCB0cnkgdG8gZ2V0IGEgcGF0Y2ggb3V0DQp0b21vcnJvdywgaWYgYWRkaW5nIHRoZSByb290IENB IGRvZXNuJ3QgaW52YWxpZGF0ZSBzb21lIG90aGVyIHRlc3QNCmxvZ2ljLg0KDQotLUphY29iDQo=