Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jmY-0001aE-SB for pgsql-hackers@arkaria.postgresql.org; Tue, 02 Feb 2021 00:43:03 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l6jm2-0000eG-DR for pgsql-hackers@arkaria.postgresql.org; Tue, 02 Feb 2021 00:42:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jm2-0000e6-2Z for pgsql-hackers@lists.postgresql.org; Tue, 02 Feb 2021 00:42:30 +0000 Received: from mail-bn8nam11on2067.outbound.protection.outlook.com ([40.107.236.67] helo=NAM11-BN8-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jly-0001eQ-An for pgsql-hackers@lists.postgresql.org; Tue, 02 Feb 2021 00:42:28 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Kav7lzF/sigQSra2vYVzV/tY/pbZF8Smj8s6MjD0ttnPB4K9MBneIPpZGkHcZ+ZT50CKC1cgVqH4IrjqRfZY5226FbKIqpLwRfGmHOsIR39+Edha4kBZNEra5u47OAHRxJoWjhpwHgDx8vZQgbkO41hlK8oWZLkFqhUH7PooMOgb3LD1ZMOPKpFj8mTfVzisb0oKjMA0BzFIXfABtutpFe71XChMSZbYDPLrac5yu4kuiEDf7L+T0JRGRKseIrBdTI7mOiWEfyuOJFUS2KNafqVAJLP/QLYQj7IDv3RATAufU43naOi9yHjSTYsniyinOgVKzSsyu8C2wXU3c9kEhg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G/hkhg1LF2CgIY5AgrEK8/fZzrc+1coNYcQaMSWa9dY=; b=mXOjMwKRm7MPcvvjjNOS/A6EqrCNAvH3eHHzD/Xhn03VmYX1hJ+TEFUOZ5KRdHyLOrRxCysK+w1Gl74loRqtMRxgBTPxIlB7Ka4hqlJlYSVglkOmBKKmZMRF3Qv9k9+cH4kOwbzMsSQ9vGxGCI+m+53jxhhMacNUpaEMmDQ/v6OEtfESCKfQDx9g/C8BjFKp9Q/OtXt8XvIWLI4+R9q8DlcY6rWnN+C8TK+pKgAuT2hsNp6qOLRFh5CKvJZ8HKTYbsfxD9grH0wN+FnM1n0fpFniCsd+3G4kyp1D32VDFo83HzROv1NhbJqPAYFrSfX3A4gbiwCcQpDrYeBcWxnMMw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G/hkhg1LF2CgIY5AgrEK8/fZzrc+1coNYcQaMSWa9dY=; b=g7WWbMv++qOhQn8TO+mIe/3ZlG/0+WFBKUiw5PymxhJ+e9Na4Me8HcReOeFtpSISjkUU+/HfYDyKjQDZWv6wdpo6JdzbfifBO4SsLHYA0ndddn5p5wXEx9euRAJ1DTV4TI7P1qPaj2qpblPA/Ql6KIP3LBwnNuouGD/MCOvnWkI= Received: from (2603:10b6:300:65::20) by CO6PR05MB7652.namprd05.prod.outlook.com (2603:10b6:5:341::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.13; Tue, 2 Feb 2021 00:42:24 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3825.017; Tue, 2 Feb 2021 00:42:23 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "sfrost@snowman.net" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAikkgIANEfAAgABhkwCABNlpAIAAQRQA Date: Tue, 2 Feb 2021 00:42:23 +0000 Message-ID: <51a7390523d3b2047ffd635e64dc5676f57dfbc7.camel@vmware.com> References: <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> <5C27CF6F-5BD3-4639-AAA6-73465595B6DF@vmware.com> <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> <60DFB11D-2466-4286-84DC-F8F965DA675C@yesql.se> <40095f48c3c6d556293cb0ecf80ea10cdf7d26b3.camel@vmware.com> <464B85DD-4734-4268-9C31-D1BCEEC3A98B@yesql.se> In-Reply-To: <464B85DD-4734-4268-9C31-D1BCEEC3A98B@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f0372c6d-50a9-4527-9544-08d8c7136838 x-ms-traffictypediagnostic: CO6PR05MB7652: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: I2CToaJDTnuBkaNhpq0teSlNV05iEhzcd/0ymBRJ+uKX++21V7f0YIV7vmdkcft/E/bALEDt5sZH4RVo0QumHkFC/qs3C4tjS0iISIWrKYlSjlNyeH3CU8AWB/tswwEl6lL83+3tYjHjWcrVQoMOsmwbngNBv8Bn3knOYFWNTY5DHrwfLoABCIaV4km5S3a5Pna+q2RFo0CtY8E0Knwg4a/06zKm8ngavO959cda/FBO1yUJYTf6n/8SuHUgPklVrm4gjl6DjVLbaBYr1JVxnJeIt46tW8lfSXwJDgibJVRyN94JF+5h2xQywJlxq6DMTkvvz6uwMEYC89xSWyNiIwRB1cQuXUWfevxgNIc274atNj299FlyM2p1B7shzvD/smeueX0x8c/EdLk5YcMHOBjP1XZZV3/DG4q9bSh6/dOMkTeIETswK4PsaM9B2vlWt/v8EEBpWccE7NZAr6lHVgXhRdEFiY5Q1wg/5e244i7Hzrjyk0l01EzGk8TyULs6be5saPWBx26Vc8ZlJ8fbaQ== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(376002)(396003)(39860400002)(136003)(366004)(346002)(54906003)(71200400001)(76116006)(316002)(6486002)(6506007)(6916009)(4326008)(2906002)(53546011)(8936002)(6512007)(478600001)(26005)(186003)(2616005)(86362001)(5660300002)(8676002)(66946007)(64756008)(66446008)(66556008)(83380400001)(36756003)(66476007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?c0dpUTRXdDBGVTVzdU00c2M2Wk1UaDMzMlRrcnhnMW9jYWVNaW9CS0FSaTVB?= =?utf-8?B?am16MlRJeVlZVkl6VDYweEkwd004cVV3RkNIclo4RXc1SHlSTlc1aTBDSnFx?= =?utf-8?B?L2JYRysvYkdVcnBtdjdTeDQrbm1rb2lJRkhxcEkyTHpZNzk4NVFFc3o2UVg3?= =?utf-8?B?ZDFXM21aNDV6ZDlNemFlQXlDT1dEcUN2c2ZhUHZPVXZMTXBnOExRV0dFcDVT?= =?utf-8?B?OFRDWEVtczlTNDR0TGd1cFlnWjcvTFpDTkl1L3lKK2trVlV2US8zdFdwQmpX?= =?utf-8?B?eUx4RlJ0dVFUU0YyeFZ2WjRtUXdNWmZjRGkwQVNKMWZ4dUxQM21OelhDRWZw?= =?utf-8?B?V2lQenNRcWVXOVptY0FTZm0yZmpIT2dLamsxWTNKZ01tWHNaY1BUL2wzakcy?= =?utf-8?B?eU5ncjRFVm5yaU1Xck0rRE42and4T2lJVHdkanEvMk52clhGOUQ5eElrNEVx?= =?utf-8?B?SThCelVYeXVJbitEU2RJR0VHOXdnSW5zYW8xb3QxT2dySVBqdFUrOEQzZm9n?= =?utf-8?B?QWU5QlBnRWJqZFllMmVWNWFZUzliN3ZpRnVWU1JLTHhSZWN1Qkg3ZGkxbzRP?= =?utf-8?B?aURFNFFad0ZvWCt5eXcrcmE1UWZaaUlTTWwzcWRnbzBjdHdtNzJCYkVudG1p?= =?utf-8?B?VlN1elB3L1VZb1pjc3oyVXkwNVp3ZjcrM21QUlpYVXVhd3hxM3FyYkJEL04r?= =?utf-8?B?amtRWFRxdXVIU3N2cndhaWg4NzdyQWNmYkJUdHRNQ3BBTXBwQ0dLamtEWnVq?= =?utf-8?B?SXRnU0wxR3NEelZ4L3FaRkVqWWRYZ0tZTkl1eEFBK3R1ZWNiM2FhYkNWLzVJ?= =?utf-8?B?Mk13YnkwOXdFckd5dDcvK2daYnBmWDVqTGlkeUVXS216amoyaytObGlZbmt3?= =?utf-8?B?N0dwcFp5c2lPZHNyOTV0TDd6MFdnc2JOSnZlcFg1azZVN3pBQVo4dTJxTGhp?= =?utf-8?B?VnNzblpUSHd6eGJmMStGTmZJRXhpdE9HWmhCY1hXckpwOWxPYU1IMHdhdnBW?= =?utf-8?B?M29ldVFKN0xXN05QQTZ6cmlPT3YrazNTSFNjbXIyMkplcVJFQmh2eXRjMW5v?= =?utf-8?B?Mmg3Y2hrdjhNK1hmUWpCbjcyR3lsNlhER0dYVnlUMkpZeWpUZmRuNVlSRmM0?= =?utf-8?B?NmtoNHRhTk1JbEEvMGlLU01KYk5PbS9aRGlNV1EveWk1YUtTcXVQdUFqY3J1?= =?utf-8?B?bUpnQmFucEY2SEtGaTQ2akR3VXdacis2SWg4UGNFZEdCbFBwOUloWWx4L0RN?= =?utf-8?B?OEpXZE14c0VwOFpIRno1aVlCNUhub3pFZFA4c21Hb0xac3NtcWFIVDZWU3JV?= =?utf-8?B?dlAwZnQybmxRVmhjN1ZaaTBpTmJmK2lmbzJZejJvTDNGcnJ2M3ZnUWdjb3V3?= =?utf-8?B?U2RmUWZ0YTVHVHNTaHY5dit3SHQ2RVBWa1E5aUorSW9CVTU0anJnN09ZRzZD?= =?utf-8?B?RGtyY3cwV0cvb29jcHVnRzdYOXhBQTlzTEVNQ0F3PT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <3E2EB02E9CA9FF4CA6A38BA41BBA0E42@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f0372c6d-50a9-4527-9544-08d8c7136838 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2021 00:42:23.8340 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: vb0y4FriI2c/mvKaD8VJ/Ej1yp9wijJf9F9cfhiYyclYwEBWkJVNdneUihSR+n1wRySymZizglWeFSf00WmBkw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR05MB7652 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gTW9uLCAyMDIxLTAyLTAxIGF0IDIxOjQ5ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAyOSBKYW4gMjAyMSwgYXQgMTk6NDYsIEphY29iIENoYW1waW9uIDxwY2hhbXBp b25Adm13YXJlLmNvbT4gd3JvdGU6DQo+ID4gSSB0aGluayB0aGUgYmFkIG5ld3MgaXMgdGhhdCB0 aGUgc3RhdGljIGFwcHJvYWNoIHdpbGwgbmVlZCBzdXBwb3J0IGZvcg0KPiA+IEVOQUJMRV9USFJF QURfU0FGRVRZLg0KPiANCj4gSSBkaWQgc29tZSBtb3JlIHJlYWRpbmcgdG9kYXkgYW5kIG5vdGlj ZWQgdGhhdCB0aGUgTlNTIGRvY3VtZW50YXRpb24gKGFuZCB0aGVpcg0KPiBzYW1wbGUgY29kZSBm b3IgZG9pbmcgY3J5cHRvIHdpdGhvdXQgVExTIGNvbm5lY3Rpb25zKSBzYXlzIHRvIHVzZSBOU1Nf Tm9EQl9Jbml0DQo+IHRvIHBlcmZvcm0gYSByZWFkLW9ubHkgaW5pdCB3aGljaCBkb24ndCByZXF1 aXJlIGEgbWF0Y2hpbmcgY2xvc2UgY2FsbC4gIE5vdywNCj4gdGhlIGRvY3MgYXJlbid0IHRlcnJp Ymx5IGNsZWFyIGFuZCBhbHNvIHNlZW1zIHRvIGhhdmUgZ29uZSBvZmZsaW5lIGZyb20gTUROLA0K PiBhbmQgc2tpbW1pbmcgdGhlIGNvZGUgaXNuJ3QgZW50aXJlbHQgc2VsZi1leHBsYW5hdG9yeSwg c28gSSBtYXkgd2VsbCBoYXZlDQo+IG1pc3NlZCBzb21ldGhpbmcuICBUaGUgdjI0IHBhdGNoc2V0 IHBvc3RlZCBjaGFuZ2VzIHRvIHRoaXMgYW5kIGF0IGxlYXN0IHBhc3Nlcw0KPiB0ZXN0cyB3aXRo IGRlY2VudCBwZXJmb3JtYW5jZSBzbyBpdCBzZWVtcyB3b3J0aCBpbnZlc3RpZ2F0aW5nLg0KDQpO aWNlISBOb3QgaGF2aW5nIHRvIGNsb3NlIGhlbHBzIHF1aXRlIGEgYml0Lg0KDQooTG9va3MgbGlr ZSB0aHJlYWQgc2FmZXR5IGZvciBOU1NfSW5pdCB3YXMgYWRkZWQgaW4gMy4xMywgc28gd2UgaGF2 ZSBhbg0KYWJzb2x1dGUgdmVyc2lvbiBmbG9vci4pDQoNCj4gPiAoSXQgbG9va3MgbGlrZSB0aGUg TlNTIGltcGxlbWVudGF0aW9uIG9mIHBndGxzX2Nsb3NlKCkgbmVlZHMgc29tZSB0aHJlYWQNCj4g PiBzdXBwb3J0IHRvbz8pDQo+IA0KPiBTdG9yaW5nIHRoZSBjb250ZXh0IGluIGNvbm4gd291bGQg cHJvYmFibHkgYmUgYmV0dGVyPw0KDQpBZ3JlZWQuDQoNCj4gPiBUaGUgZ29vZCg/KSBuZXdzIGlz IHRoYXQgSSBkb24ndCB1bmRlcnN0YW5kIHdoeSBPcGVuU1NMJ3MNCj4gPiBpbXBsZW1lbnRhdGlv biBvZiBjcnlwdG9oYXNoIGRvZXNuJ3QgX2Fsc29fIG5lZWQgdGhlIHRocmVhZC1zYWZldHkNCj4g PiBjb2RlLiAoU2hvdWxkbid0IHdlIG5lZWQgdG8gY2FsbCBDUllQVE9fc2V0X2xvY2tpbmdfY2Fs bGJhY2soKSBldCBhbA0KPiA+IGJlZm9yZSB1c2luZyBhbnkgb2YgaXRzIGNyeXB0b2hhc2ggaW1w bGVtZW50YXRpb24/KSBTbyBtYXliZSB3ZSBjYW4NCj4gPiBpbXBsZW1lbnQgdGhlIHNhbWUgZ2xv YmFsIHNldHVwL3RlYXJkb3duIEFQSSBmb3IgT3BlblNTTCB0b28gYW5kIG5vdA0KPiA+IGhhdmUg dG8gb25lLW9mZiBpdCBmb3IgTlNTLi4uDQo+IA0KPiBObyBpZGVhIGhlcmUsIHdvdWxkbid0IHRo YXQgaW1wYWN0IHBnY3J5cHRvIGFzIHdlbGwgaW4gdGhhdCBjYXNlPw0KDQpJZiBwZ2NyeXB0byBp cyBiYWNrZW5kLW9ubHkgdGhlbiBJIGRvbid0IHRoaW5rIGl0IHNob3VsZCBuZWVkDQptdWx0aXRo cmVhZGluZyBwcm90ZWN0aW9uOyBpcyB0aGF0IHJpZ2h0Pw0KDQotLUphY29iDQo=