Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mSTIl-0005yw-6a for pgsql-hackers@arkaria.postgresql.org; Tue, 21 Sep 2021 00:06:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mSTIk-0000ER-4v for pgsql-hackers@arkaria.postgresql.org; Tue, 21 Sep 2021 00:06:22 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mSTIj-0000EJ-J7 for pgsql-hackers@lists.postgresql.org; Tue, 21 Sep 2021 00:06:21 +0000 Received: from mail-bn8nam08on2066.outbound.protection.outlook.com ([40.107.100.66] helo=NAM04-BN8-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mSTIh-0001zZ-0Y for pgsql-hackers@lists.postgresql.org; Tue, 21 Sep 2021 00:06:20 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=i9gUMXy3nWaA0twGDkWLuV7l7f5NsqhDDP0ICXra3pVVzg26VV7P8qMQZEWYpHN2TnMtoCoxm6pEeq8IuNVuoesWk/I5XVyksm8ZDRTQXrNTl+qRS0CkpPiX5TgLHbf6J6ilTegGhrxRze926NUCglP/oSQur3+oCQbxEyznxr7chc5bqB5Gr8Pzou+erm1tMjAFoMadtWFx94+jGBogxXRIhrpjjCRpkNEA7bo/b577OP8otvPav7Bvnn8w4ZLgeN+2DUCiPhjWOCIe9yZRxRLMHm1wKC7Xd/nsB6UkM5f8PZCMbKHmMfb5LWusigqBPLf0kWBnSx8HxiN0UwO7aA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NFQ9oVxYHEXQVaDlja5+xWCZXWi+BwzzavGGhKJx9eI=; b=OgKmzPxMhdbPwX3i4rjEK8o94WC6HXiNzzMGxIA3vPMmRxpCju3rJj1iVpmjEAMAEiBBi7g4pbHZDHu/rj+RjKggSgOlHOu95IZwxTUnWhY8IpAnys4BdQFolDRS9mV1jp7XbVhq+6ZoxmUjGw2yZJMq7pxYQdXfyxgC8xj7zIiKT+67GMjuRGFHCnQmxwYjKpk/VSWH9p/Y6Mw8BIWizaFDJzbD/TEsKmD+dOKe2o6Lv/GE5NB+aBRtbExAeyD+uOm6YMCkCFwdHyHNKiMmVidm+pGX6AQApPWvdRh6qs9p4P6uzfQJTabd7GUnooYAXA7aLKuaHhPFbCFn9YrCKg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NFQ9oVxYHEXQVaDlja5+xWCZXWi+BwzzavGGhKJx9eI=; b=vdB0EZi/x+8dv4QdctlM2nZtvLuilfh3pxVTuRt4LjCpmMB91empwuyQB65YCoXCDEz1v9VNXos8BOW6v5TKPr2viFBBM5MpjolrnrMpG7xExw5NH5PvN5rfgujNFmSUKuhrojqOtRCS6YQ9HQBU+rhWgWt0ECYCzgFqj7rNXWs= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO1PR05MB8378.namprd05.prod.outlook.com (2603:10b6:303:e1::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4544.13; Tue, 21 Sep 2021 00:06:16 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a%8]) with mapi id 15.20.4544.013; Tue, 21 Sep 2021 00:06:15 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "andres@anarazel.de" , "thomas.munro@gmail.com" , "sfrost@snowman.net" , "michael@paquier.xyz" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: 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 Date: Tue, 21 Sep 2021 00:06:15 +0000 Message-ID: <55c94351495efe34e167d4d2b1541b8194f1318c.camel@vmware.com> References: <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> <20210324170036.GS20766@tamriel.snowman.net> <8f741a425fd135ca38a28063730715499f7f6445.camel@vmware.com> <20210324181016.GU20766@tamriel.snowman.net> <50c5a423329ea9996a2a2b167931711189ed5d1b.camel@vmware.com> <2FD5BB88-595A-47A0-8F51-0A1B5EEC93FA@yesql.se> <4a15bbab42cd85b6bec83c2609305552d246f68e.camel@vmware.com> <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f6edcc29-41cc-4ce4-9349-08d97c93a158 x-ms-traffictypediagnostic: CO1PR05MB8378: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(376002)(346002)(396003)(136003)(39860400002)(66946007)(54906003)(316002)(66476007)(36756003)(6916009)(8936002)(38070700005)(478600001)(122000001)(38100700002)(66446008)(5660300002)(4326008)(76116006)(53546011)(6506007)(71200400001)(64756008)(66556008)(2616005)(83380400001)(26005)(86362001)(186003)(6486002)(2906002)(8676002)(6512007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?VnJyT0t0eFlsbURvRkNMWUpSdkt6VzhOc0NFTnJ1M2J1TDljWjlnNnR4c1hY?= =?utf-8?B?U01HTjdjeEZ1T3BBczV2MUNNeWgzOFJ6WGhMK1llektiOGNER1FUNWFJOFFR?= =?utf-8?B?OGZlbnpiTTJ4T0hFMDZUZVJHVTRoK1NJNGJkLzR6UzBxZk8yaWhmeXVNcXpL?= =?utf-8?B?TjllcXlWaXhuaFpyb1JqT09PSXNHVDUzcGlCSnZ5NWdhaTVZV1BVbW5SYXBk?= =?utf-8?B?eGFNcGNQRDVRdDV3QkdRVzVPN3JNbkpVb0NjZzBJNzVmZnhyMGtONVBBUmE4?= =?utf-8?B?NXVidjlReFJkVlFkVnRBYTdkWDZUbmxmaTA0WExCa3NQTHVkOFhCMXhWM3dn?= =?utf-8?B?MU9Md3ZFZlJVb1hueUtyVjZNYWE1K29NWS9IZ3Z5a3pNcXZtQW4yM3hOZk5E?= =?utf-8?B?SzBKcE8rZEk3VHJIZEJLdGN1NHVlemF5bmg2VHlQSnB1clhSdEZaSHJNQ2dh?= =?utf-8?B?eEZWMlduUnd4VzlENG1kYmNNL2tubXpPMVpYZkRTWjNjWGxUcGNMeDJaVHZG?= =?utf-8?B?aHg2OTRxcmQ3eGZKV2ZoQy9aQk9yMm52T2xpbWxoeWJROC9OUnF3eDZuOHBt?= =?utf-8?B?VFdjellmaWVOTERkTEJKSnpsZm16SWxha0pEbzY5T3psVXF5R09VZHphdlB3?= =?utf-8?B?Vytna1MvbUNQelQ4OTFkbXJOTWRMZ2lMMmd3eU1Sb3RvLys0TFpLYndIUnJV?= =?utf-8?B?Q09JVEJQdnU3SGMxamQzSlRxOEtVWHJkUG0vc2FxWE5xa1pHZy9oWU4rN1M4?= =?utf-8?B?VHVsaHpRQzVPYVIyTmFSazBjVjNTYk5uOHh6M2NQUGdpNE4rc3FDd2tGTGkr?= =?utf-8?B?eFZuUkNmMmdmQnBySVFxT1huMU1aNEVmdE1GYTdKYVVwellFTExWK2NKcFUv?= =?utf-8?B?YU5PeDRlcmMzTW1RMjFSWHd1RzBHV2Ewa01iV2JOaEhKUFZvMWVJTVp1VWtP?= =?utf-8?B?Sm9qZlhOUkdwRmdkZUpQbmFEVFBZdCtQSUtuZzVkdzFiVXZjcThXdHRTK1B3?= =?utf-8?B?a3hHeVZoU1prcWZ4dWhpUHhoSldLSXY1R3JDb3hCNmhxQTNXMWlqMEJhMmNL?= =?utf-8?B?RzhwL2pyK01NWG5sS3hyQ2U1aXBYajFtN3pWd1hiSFdZYTN6aWV3UzB4VEkr?= =?utf-8?B?bjBhdkJiemk1cllpMUkxaWt6dncxVjlzNC9tL21rck5lVGdFMENSakxEbHJN?= =?utf-8?B?bDBqNjdHREx0elRQK1kyTWV5bysxZWh4aGRrSXc0K2thbkhNVlRpSWd2Q1hS?= =?utf-8?B?NWRMZTZ3d2Nyb3kzM1Q4MzQ5YWtOMlFibWQ3Sjc4bUhEekFNR2p6S0xSYlRj?= =?utf-8?B?S1M0cnJHdGFMajR3K0p5QStNSFhvQjdQdUpLN3VIM3FUM1YyZUNtQ1VpSFJr?= =?utf-8?B?RS9zc1VadEt2cXBQRTdHc0NOdkVQY2NOWE8xNUZHbGFYVThUS2tGRjhNcDBL?= =?utf-8?B?c3BHSkxGNGxVZFp4NVR4aU13SURDSHBMdi8wWGZQanNKcWR6T2w0Q1FGcEE3?= =?utf-8?B?SzJHZ1RudzQveTNST0swUlFzeDl3amhzdGZBWFAwZGJCdUxBOFRTVU05N0dG?= =?utf-8?B?OTk0WW9nL3lPaG1vYmdYZCtVQ2xSLzJtb0wxRkFWeG4xOVNYTGpUSllRZzM3?= =?utf-8?B?U1JhelBmcUovN0ZUamdqTW0wWlp0M2kzT2ZzbjFYbkZUM3VPdVQvbFFoWVVM?= =?utf-8?B?bEZNMWYvdkxndVFobGIvYjRwWlNnRnpCclVSNytjTGJLWnJ0THFuTjAvVEE5?= =?utf-8?Q?lB/XBzxVR6bXzTMQ+AqNkDuI9C1PA/60E/3yXoG?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f6edcc29-41cc-4ce4-9349-08d97c93a158 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Sep 2021 00:06:15.7999 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: hDmXtQknB1twe8nfWBECMfM0eeuaIV658Xzv1tyFU7/DT2gpbaiYToXzzKPZxIBP0MqYmYlLDOgGuuC1dxBOhg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8378 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gTW9uLCAyMDIxLTA3LTI2IGF0IDE1OjI2ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAxOSBKdWwgMjAyMSwgYXQgMjE6MzMsIEphY29iIENoYW1waW9uIDxwY2hhbXBp b25Adm13YXJlLmNvbT4gd3JvdGU6DQo+ID4gLi5jbGllbnQgY29ubmVjdGlvbnMgd2lsbCBjcmFz aCBpZg0KPiA+IGhvc3RhZGRyIGlzIHByb3ZpZGVkIHJhdGhlciB0aGFuIGhvc3QsIGJlY2F1c2Ug U1NMX1NldFVSTCBjYW4ndCBoYW5kbGUNCj4gPiBhIE5VTEwgYXJndW1lbnQuIEknbSBydW5uaW5n IHdpdGggMDAwMiB0byBmaXggaXQgZm9yIHRoZSBtb21lbnQsIGJ1dA0KPiA+IEknbSBub3Qgc3Vy ZSB5ZXQgaWYgaXQgZG9lcyB0aGUgcmlnaHQgdGhpbmcgZm9yIElQIGFkZHJlc3Nlcywgd2hpY2gg dGhlDQo+ID4gT3BlblNTTCBzaWRlIGhhcyBhIHNwZWNpYWwgY2FzZSBmb3IuDQo+IA0KPiBBRkFJ Q1QgdGhlIGlkZWEgaXMgdG8gaGFuZGxlIGl0IGluIHRoZSBjZXJ0IGF1dGggY2FsbGJhY2ssIHNv IEkndmUgYWRkZWQgc29tZQ0KPiBQb0MgY29kZSB0byBjaGVjayBmb3Igc3Nsc25pIHRoZXJlIGFu ZCB1cGRhdGVkIHRoZSBUT0RPIGNvbW1lbnQgdG8gcmVmbGVjdA0KPiB0aGF0Lg0KDQpJIGR1ZyBh IGJpdCBkZWVwZXIgaW50byB0aGUgU05JIHN0dWZmOg0KDQo+ICsJc2VydmVyX2hvc3RuYW1lID0g U1NMX1JldmVhbFVSTChjb25uLT5wcl9mZCk7DQo+ICsJaWYgKCFzZXJ2ZXJfaG9zdG5hbWUgfHwg c2VydmVyX2hvc3RuYW1lWzBdID09ICdcMCcpDQo+ICsJew0KPiArCQkvKiBJZiBTTkkgaXMgZW5h YmxlZCB3ZSBtdXN0IGhhdmUgYSBob3N0bmFtZSBzZXQgKi8NCj4gKwkJaWYgKGNvbm4tPnNzbHNu aSAmJiBjb25uLT5zc2xzbmlbMF0pDQo+ICsJCQlzdGF0dXMgPSBTRUNGYWlsdXJlOw0KDQpjb25u LT5zc2xzbmkgY2FuIGJlIGV4cGxpY2l0bHkgc2V0IHRvICIwIiB0byBkaXNhYmxlIGl0LCBzbyB0 aGlzIHNob3VsZA0KcHJvYmFibHkgYmUgY2hhbmdlZCB0byBhIGNoZWNrIGZvciAiMSIsIGJ1dCBJ J20gbm90IHN1cmUgdGhhdCB3b3VsZCBiZQ0KY29ycmVjdCBlaXRoZXIuIElmIHRoZSB1c2VyIGhh cyB0aGUgZGVmYXVsdCBzc2xzbmk9IjEiIGFuZCBzdXBwbGllcyBhbg0KSVAgYWRkcmVzcyBmb3Ig dGhlIGhvc3QgcGFyYW1ldGVyLCBJIGRvbid0IHRoaW5rIHdlIHNob3VsZCBmYWlsIHRoZQ0KY29u bmVjdGlvbi4NCg0KPiArCWlmIChob3N0ICYmIGhvc3RbMF0gJiYNCj4gKwkJIShzdHJzcG4oaG9z dCwgIjAxMjM0NTY3ODkuIikgPT0gc3RybGVuKGhvc3QpIHx8DQo+ICsJCSAgc3RyY2hyKGhvc3Qs ICc6JykpKQ0KPiArCQlTU0xfU2V0VVJMKGNvbm4tPnByX2ZkLCBob3N0KTsNCg0KSXQgbG9va3Mg bGlrZSBOU1MgbWF5IGFscmVhZHkgaGF2ZSBzb21lIGNvZGUgdGhhdCBwcmV2ZW50cyBTTkkgZnJv bQ0KYmVpbmcgc2VudCBmb3IgSVAgYWRkcmVzc2VzLCBzbyB0aGF0IHBhcnQgb2YgdGhlIGd1YXJk IG1pZ2h0IG5vdCBiZQ0KbmVjZXNzYXJ5LiAoQW5kIHBvdGVudGlhbGx5IGNvdW50ZXJwcm9kdWN0 aXZlLCBiZWNhdXNlIGl0IGxvb2tzIGxpa2UNCk5TUyBjYW4gcGVyZm9ybSB2ZXJpZmljYXRpb24g YWdhaW5zdCB0aGUgY2VydGlmaWNhdGUncyBTQU5zIGlmIHlvdSBwYXNzDQphbiBJUCBhZGRyZXNz IHRvIFNTTF9TZXRVUkwoKS4pDQoNClNwZWFraW5nIG9mIElQIGFkZHJlc3NlcyBpbiBTQU5zLCBp dCBkb2Vzbid0IGxvb2sgbGlrZSBvdXIgT3BlblNTTA0KYmFja2VuZCBjYW4gaGFuZGxlIHRob3Nl LiBUaGF0J3MgYSBzZXBhcmF0ZSBjb252ZXJzYXRpb24sIGJ1dCBJIG1pZ2h0DQp0YWtlIGEgbG9v ayBhdCBhIHBhdGNoIGZvciBuZXh0IGNvbW1pdGZlc3QuDQoNCi0tSmFjb2INCg==