Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mUtVq-0003dY-71 for pgsql-hackers@arkaria.postgresql.org; Mon, 27 Sep 2021 16:29:54 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mUtVn-0006Sf-Ob for pgsql-hackers@arkaria.postgresql.org; Mon, 27 Sep 2021 16:29:51 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mUtVn-0006SW-CT for pgsql-hackers@lists.postgresql.org; Mon, 27 Sep 2021 16:29:51 +0000 Received: from mail-dm6nam10on2072.outbound.protection.outlook.com ([40.107.93.72] helo=NAM10-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mUtVk-0000xq-6B for pgsql-hackers@lists.postgresql.org; Mon, 27 Sep 2021 16:29:50 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MJIn8ZSG4uO9DQkQGEHbQwxGtVnyzG8aaD1eJbqWYTdR9TG5fISt8SSgNCiXfUpowx5wNb8PPvuIQ+4eqs201A+mozTAXBwk06oFTK5e8l5AvtELWMVUTFy38AP7SkNx0tGv8DiLcpQxFnD7xLhKEy6DcTbHb0U0FQMoc7gHHkAbwAF5dI6+ocXQrox3UJzapzobooUNPvvAKGoEKDpoOXa8gBIwkY6v/ar8XkGiLiN3Qyx/VMro+8TS4CT7EdWL7FMnLplCSGXS33JosN96ojYQW4pu0SreiObhs/LRkqyMLKnQy/fq3PvRMCDzWSDOHK9jbHQAN5izZMhI6xCL5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=RHLaJv+Zc0xuFGJoPyIFF91jzKOusRVLIGmABL5ADss=; b=CTRSgTbG/Dsm4sR0/zHQznLeYCQs6J+U6ZNgRYjK4B3f9XcQa/e4aO/uV/4r+KsYfQDxi2v0GejndQVuRgPSFJBlw0DsGoosPOFurdJNv1Hz4aWofJotXroO4bkcYHVtrHawKVa6038ExS2z6tttCKjSS6IsYOtazqGL1AegY7BJJ/rG66UH+IpJN/gAH6sVEnYK851+itJUvlIHD4wDNxjR6GL0syKbRqu3inkIkVtbXAZe7sSY2njXYHyv198KFfnS6vjjtYi5zRitJKVeyCQVmO20KGprVE6T9/k/S6LjhTWK9kMTCmfaQF+IJAvzddbMKqrVuPquUTaR2sucmg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RHLaJv+Zc0xuFGJoPyIFF91jzKOusRVLIGmABL5ADss=; b=xoBVCQpoosq1d/n46lkqkjnjxPlxvzYUMoDlgy7Ie/d9RxzFmj30cyKN8MO1UOq2Ki5J0kiPSH8YyF2jhEZivaVxFjvdPNRmjjELj5ZL5ibMnYgZ5iRnMM71Br5765RJc4LXURZ/QZR0+BFLz4KOmjx6t0sn9Y3KkyMcRkAKuCs= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO2PR05MB2662.namprd05.prod.outlook.com (2603:10b6:102:f::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4566.10; Mon, 27 Sep 2021 16:29:44 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a%8]) with mapi id 15.20.4566.012; Mon, 27 Sep 2021 16:29:44 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "michael@paquier.xyz" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: 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 Date: Mon, 27 Sep 2021 16:29:43 +0000 Message-ID: <58e9289dc6f7818841635ca2c2978c78af64e4fd.camel@vmware.com> References: <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> <20210324170036.GS20766@tamriel.snowman.net> <8f741a425fd135ca38a28063730715499f7f6445.camel@vmware.com> <20210324181016.GU20766@tamriel.snowman.net> <50c5a423329ea9996a2a2b167931711189ed5d1b.camel@vmware.com> <2FD5BB88-595A-47A0-8F51-0A1B5EEC93FA@yesql.se> <4a15bbab42cd85b6bec83c2609305552d246f68e.camel@vmware.com> <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> <55c94351495efe34e167d4d2b1541b8194f1318c.camel@vmware.com> <55454C3B-1BCB-4F08-AB93-FAF9100B6201@yesql.se> In-Reply-To: <55454C3B-1BCB-4F08-AB93-FAF9100B6201@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6fd10fb7-9691-4947-8873-08d981d403a6 x-ms-traffictypediagnostic: CO2PR05MB2662: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(5660300002)(122000001)(6486002)(53546011)(186003)(38100700002)(2616005)(8676002)(6506007)(26005)(71200400001)(66556008)(2906002)(66946007)(54906003)(36756003)(38070700005)(66476007)(76116006)(508600001)(4326008)(316002)(86362001)(64756008)(8936002)(66446008)(83380400001)(6916009)(6512007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?VDV6ZU54K0owb3d1d283SUdKVmJ4Y2d3aTFqODVVMGZSVlNTS0I0dDc4RlFQ?= =?utf-8?B?aE1wYnk5dVByYmpLL3A5WlR0UmxaK0JzS0d2cEZOME5LWTlCL09uQXZYdzdn?= =?utf-8?B?KzlMZmJ3YUZOT2g2NGRyWDJ4a3UwNzlGNUFKTDlwV0h2UGpSblFIMWVTc2JB?= =?utf-8?B?R2ZuRlJDWlZLL3pqaXRtVTFkUlJ6RnprZk9CRFV3d1pMNysreVVscWtSandj?= =?utf-8?B?ZGlETWRxcnBBRkpVYWtxejdJSTBpakIvWkpYKzZOcFB0dFR0di9EMnRrNXE0?= =?utf-8?B?dUtzcXBLYjYyM09mNjZQMkd5bThMa0lJSDF6cndERnlRUWpxb0xVMGMvVUty?= =?utf-8?B?UWUxQ3RpYUM1UklsK0V1UlNvTEpTSDcyQllnZllFSjJxcWxndUl1NjM3NWc5?= =?utf-8?B?TnF2ay9tWkh3STFROFBDUElBZzhlaThsMExzTFB3aWkxVDRLakttQUl4eFBS?= =?utf-8?B?WmM1cGJobW9MK29TSTEyMTM1V2lUSnQwNzBMN2cvWis5R04xSTBHTUx1aVNz?= =?utf-8?B?ckRZL3hvc2JzeXBJdko3ZkJ4SzN1LzRuV1haNER4STlxeEhSODNoNmpBRGhD?= =?utf-8?B?YkhTaXhLZXNHcXFkdXpkd0VDNWwxb1ptSFlNekt2UFZRalN6RE9WdjhYdnJE?= =?utf-8?B?WGgxQmI2eVR0TkVrTUZaMmhHVDRoeEVXQUNSS3dEY3QzUDh0czhJYm1YUWFz?= =?utf-8?B?MGJmZWIyWkdDVHJpRGd0TkRmTk9pMXlLM1RYL3B4MUJ4WEw0b0I0OTZIbDQr?= =?utf-8?B?NGU2ZGRFeElUUHloK3k5VFl0OExnYjFpMzluY2E3cGpycktVci9KUmlnQk4y?= =?utf-8?B?UDBZdzlkcXZMMEZ3alJyOEV1RkJWcTlrcUFrR3dFVHBDNEVEeno1aCtaaGZP?= =?utf-8?B?alpWT1IwVUwyNTlsYSt1RC9CMWF1eWpMdkFlM3ZkaFpRZUUzbEROdzdPNkxa?= =?utf-8?B?WlRkZ3dUS0xHNldmWnRKTjR3d3lRN1R3SVhSM2dWeHMwYU9hcVl0ZnlqQU5i?= =?utf-8?B?QTAzVGFsZlJrOGdURTRLajZTT0JLeG5vVEFYbnBNV1lZc0h3ZTVFWExKT3E3?= =?utf-8?B?c253d0hFTjFmbC9oTG1CVjdHcDExS0Y4TlJ4akRqUnBuQzZySCs1YWpSQm5M?= =?utf-8?B?dlpYNE11bElyWnJZc3FxZHdTbzc4S1JieG9MVm1xNllnSDNYQnZDTG1TM3RY?= =?utf-8?B?Q1lwZDBjRnNLT1ZXenlDc3RCSVEvSHlBcDl6WlYwWXlZMTl3dHhCZnoya2RO?= =?utf-8?B?UE55NWNUYUpyVHJBdURpN25xMlFncElVdkJqWGhCMW9KL09XSlQrZUVPMEVz?= =?utf-8?B?Z29ybmhRUE5LKzhsV3N1emtIOFZydFd1RVpNbmRCbGlaV3VFSG5wcnZLNElZ?= =?utf-8?B?NU1OWk5nMkZCMFlhMElNOGx1VDJNWVZCUVUyZVpUMUJkcytPTElWSWxRQW95?= =?utf-8?B?Nkg3MW9CbitsYnplZzErZDk3eVEvTHljUWpNZXA0Ly9MTHBMZUNhMDM5TDhU?= =?utf-8?B?RHVIRkg4dkZUNUJFSWZoRTRNNkJpTzU1V1Q1b28yU3VweUF4K2hGK1pGbmhs?= =?utf-8?B?aWQvU29GNmJyRFlSV1VidHN1UjZIbkVET2o5WnBRSVYzWU1HSjZSL2UrTDhj?= =?utf-8?B?d3BtZllsR0RLSFAxN1k5ckxRL2Y3R0o0UFFUdjZBcitWaEJ1TDhZdlRNVlVE?= =?utf-8?B?emhJbHZXaVhFNWpjWnZjenJYVDJDNUpNMjBRVGxMKzdJQ3ZCTmpsTVFGcWtu?= =?utf-8?Q?lApLDNADIo4nmALR2KpBQPrWWsxQmSh+HdCHBj+?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6fd10fb7-9691-4947-8873-08d981d403a6 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Sep 2021 16:29:44.0832 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 4P25SI/VMhOBbDQ2u4Bu/7bAWv2mMdvP6DDYT7bqWjN18tt7baYBcQJN94uOUGchKa/nVjMEWW9r8nQC3NhQ/g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2662 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gTW9uLCAyMDIxLTA5LTI3IGF0IDE1OjQ0ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAyMSBTZXAgMjAyMSwgYXQgMDI6MDYsIEphY29iIENoYW1waW9uIDxwY2hhbXBp b25Adm13YXJlLmNvbT4gd3JvdGU6DQo+ID4gYnV0IEknbSBub3Qgc3VyZSB0aGF0IHdvdWxkIGJl DQo+ID4gY29ycmVjdCBlaXRoZXIuIElmIHRoZSB1c2VyIGhhcyB0aGUgZGVmYXVsdCBzc2xzbmk9 IjEiIGFuZCBzdXBwbGllcyBhbg0KPiA+IElQIGFkZHJlc3MgZm9yIHRoZSBob3N0IHBhcmFtZXRl ciwgSSBkb24ndCB0aGluayB3ZSBzaG91bGQgZmFpbCB0aGUNCj4gPiBjb25uZWN0aW9uLg0KPiAN Cj4gTWF5YmUgbm90LCBidXQgZG9pbmcgc28gaXMgYXQgbGVhc3QgaW4gbGluZSB3aXRoIGhvdyB0 aGUgT3BlblNTTCBzdXBwb3J0IHdpbGwNCj4gaGFuZGxlIHRoZSBzYW1lIGNvbmZpZyBBRkFJQ1Qu IE9yIGFtIEkgbWlzc2luZyBzb21ldGhpbmc/DQoNCldpdGggT3BlblNTTCwgSSBkb24ndCBzZWUg YSBjb25uZWN0aW9uIGZhaWx1cmUgd2hlbiB1c2luZyBzc2xzbmk9MSB3aXRoDQpJUCBhZGRyZXNz ZXMuICh2ZXJpZnktZnVsbCBjYW4ndCB3b3JrLCBidXQgdGhhdCdzIGEgc2VwYXJhdGUgcHJvYmxl bS4pDQoNCj4gPiA+ICsJaWYgKGhvc3QgJiYgaG9zdFswXSAmJg0KPiA+ID4gKwkJIShzdHJzcG4o aG9zdCwgIjAxMjM0NTY3ODkuIikgPT0gc3RybGVuKGhvc3QpIHx8DQo+ID4gPiArCQkgIHN0cmNo cihob3N0LCAnOicpKSkNCj4gPiA+ICsJCVNTTF9TZXRVUkwoY29ubi0+cHJfZmQsIGhvc3QpOw0K PiA+IA0KPiA+IEl0IGxvb2tzIGxpa2UgTlNTIG1heSBhbHJlYWR5IGhhdmUgc29tZSBjb2RlIHRo YXQgcHJldmVudHMgU05JIGZyb20NCj4gPiBiZWluZyBzZW50IGZvciBJUCBhZGRyZXNzZXMsIHNv IHRoYXQgcGFydCBvZiB0aGUgZ3VhcmQgbWlnaHQgbm90IGJlDQo+ID4gbmVjZXNzYXJ5LiAoQW5k IHBvdGVudGlhbGx5IGNvdW50ZXJwcm9kdWN0aXZlLCBiZWNhdXNlIGl0IGxvb2tzIGxpa2UNCj4g PiBOU1MgY2FuIHBlcmZvcm0gdmVyaWZpY2F0aW9uIGFnYWluc3QgdGhlIGNlcnRpZmljYXRlJ3Mg U0FOcyBpZiB5b3UgcGFzcw0KPiA+IGFuIElQIGFkZHJlc3MgdG8gU1NMX1NldFVSTCgpLikNCj4g DQo+IFNraW1taW5nIHRoZSBOU1MgY29kZSBJIHdhc24ndCBhYmxlIGZpbmQgdGhlIGNvdW50ZXJt ZWFzdXJlcywgY2FuIHlvdSBwcm92aWRlIGENCj4gcmVmZXJlbmNlIHRvIHdoZXJlIEkgc2hvdWxk IGxvb2s/DQoNCkkgc2VlIHRoZSBjaGVjayBpbiBzc2xfU2hvdWxkU2VuZFNOSUV4dGVuc2lvbigp LCBpbiBzc2wzZXh0aGFuZGxlLmMuDQoNCj4gRmVlbCBmcmVlIHRvIHBvc3QgYSBuZXcgdmVyc2lv biBvZiB0aGUgTlNTIHBhdGNoIHdpdGggdGhlc2UgY2hhbmdlcyBpZiB5b3Ugd2FudC4NCg0KV2ls bCBkbyENCg0KVGhhbmtzLA0KLS1KYWNvYg0K