Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mW60F-0003n1-JT for pgsql-hackers@arkaria.postgresql.org; Fri, 01 Oct 2021 00:02:15 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mW60E-0005Uq-Df for pgsql-hackers@arkaria.postgresql.org; Fri, 01 Oct 2021 00:02:14 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mW60D-0005Ui-Od for pgsql-hackers@lists.postgresql.org; Fri, 01 Oct 2021 00:02:14 +0000 Received: from mail-mw2nam12on2088.outbound.protection.outlook.com ([40.107.244.88] helo=NAM12-MW2-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mW60B-0001d9-3I for pgsql-hackers@lists.postgresql.org; Fri, 01 Oct 2021 00:02:12 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UOCNChQ3laziEZSYiUlhze3zKt9GBX5E0xVZYHFOPHfBlAPJu0LFoJokMWsEDMoskeFfWbfkx0tIB2So41ZtpJGnEkJeJKqTFbz+QQHr0/moTc2dT9qbtf/LhFHdMnboatVLAx0nPNJ8nQWjc3jRz7PhpEaXbcOxN86C5W50Mzbz5pURh2ees62+pM0XNAAZj7BvlxIg/sxuH/fkXC+PyQdIZUOs9KQWW5tTocbZ/BRASlfj0uniDjpzu14chWUZ3FeErMvcqVjslLIxDTeZbG714/maDYybaSqCgL1xa9QcQ0w050qHffG/KNi5wqC7jlwUeEukgqTG77CmWQ64pg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ysZdper3LtayKUyQteqTtkcczC91qgv4KTnYRbXcsGE=; b=FX9eO90r1PEGcadfD67/VHNGTZdwuQ30loDgtja7RDbBcWpkPeMDqiPpDM2iNF47jkwg+4yq2JVkiIb0qFPE6fOCL6kiefD7W+y7poVEkqRX/ePuhwCrYorzOES+IVi5oeP2QinB6w/LqB7e+hLPftJFsMtpN8eqU793pKSxo1Dr5uuPbKYgffTPprOERqo0Q4r4mio5rtxS9a7o5w35jvcdmGszB544bkAl84p4+RNFnkhgRL8xEe18daQ6P299uKWQMAPWQz0u40/nD7YrAYa3j5NDZz3oOQ3BTXuU3dJ9St/fzU/BOyGmJ4AjbSSyD5MuX4TNk/KvplObFeVz7Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ysZdper3LtayKUyQteqTtkcczC91qgv4KTnYRbXcsGE=; b=scNO+7+KtkPRm/DQ4rONNT4OC802xrUKiS0ahDFIoka4PJoC3UhCvasNg1DCLsn/RMEpnLpt+Zxm7hi1pFP2RslVSW4d8Cq4DaMF4TSLYS7tJ2L9ty/958g2TS60/uc0MV8e2afU6hVn9tD+NfJh5VZ5uzqzNcfXJJC/96VGA8Q= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO2PR05MB2503.namprd05.prod.outlook.com (2603:10b6:100:1::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4566.14; Fri, 1 Oct 2021 00:02:06 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::b8ad:c0df:fc49:52a%8]) with mapi id 15.20.4587.009; Fri, 1 Oct 2021 00:02:06 +0000 From: Jacob Champion To: "daniel@yesql.se" , "rachelmheaton@gmail.com" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "andres@anarazel.de" , "thomas.munro@gmail.com" , "sfrost@snowman.net" , "michael@paquier.xyz" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEAgAXTZYCAAkVWAIAAzGsAgArFR4CAHUTDgIABj0AAgAGZzQCAAAZRAIABAusAgAASXQCAAAtLgIAACCwAgABgtICAZFvbgIAA0mkAgBuUywCAAZBvAIAAHEqAgADlhQCAAC3jAIAAPJaAgAqarYCAKTzWAIAKmcAAgBfU7gCAC3FggIAAByqAgACbR4CAIZgpgIASQfMAgAviXYCABAFvgIAAP3iAgACFZAA= Date: Fri, 1 Oct 2021 00:02:06 +0000 Message-ID: <5c54945a0ac555a49a4951cd87b681a5ed4d21c8.camel@vmware.com> References: <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> <33A9AFD6-7285-4064-9806-B08D7E61A88C@yesql.se> <93011BD4-4CC5-419B-9D5D-526274824831@yesql.se> <2A20EED9-2D5E-4779-B201-B7458DFC3FE2@yesql.se> <09DB934A-2B4B-4F1E-9DAA-C55D50F254D1@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fd2c0922-fd30-42a7-2110-08d9846eb4ce x-ms-traffictypediagnostic: CO2PR05MB2503: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lvM2fFN++5CjHEvtwJtl7r/Gbv1Vnra0OlrcNHrw2gtZHFfsV5+izpbZdPrje4vn3M3yhjcmiRK1xZ8aXp163+uJyW1FzpYUBXxXsoZMY9vyEnfvd0FrM7rjgiuyb7JverEEaf/ZvbVEAZ0dYZLpI3C2sXpZ/DV4z5/eZwU4Ukru8EyiFUBkP5p3anmGPShVIjNLtxbDDL1S+sVwEvVfAyFvJJ9i0Mm5ha5zuMQXOMhEDMeqB/9j8qHaHxMSOyhn/8bThgWp8D6H8VKRpRGENb5lyTGOH5U1wYCMoiGZMbvKZaN2VYrpe5ycgN/BALbQlUPYwe7eNAjcrUvMhIGmRxLLBmlRYyxTFpeiKf5FiN+MFKflsmnYJLaugUwx8VfbXKDYQV3IiWPjtSJC7405YZERA1d6zogOp4fd/dhz5TnxJhDkc0qvSTPZz4Zsn9vi70GLib/tHznzQxGO3+MVICSFhYI3dx5WX1r79O8otPwVKt3Lp64+g3VoQXORMrYT2oJtW2TwYZfT8JEbo/ByYKsd5jgin0R1Ok3Xb03IfacDEcR6fWlSbBuJ9Vz9nkSpePWfZ059p3PY42HSOxjCdlz5Qy1fnjyQtzhIcgPyL6aog4/puJoWoHw1I5SwA10QwuoIjVDAcB1SRFFtMddEZmRfhDFX9V7qLAb84Q7N+xst7iGSckF+lNLwNYMBkNTrAxQtHPQO5cEXq6IMh4Qmow== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(6506007)(6512007)(54906003)(26005)(110136005)(508600001)(316002)(4744005)(5660300002)(2906002)(6486002)(122000001)(186003)(66446008)(4326008)(8936002)(64756008)(66556008)(66946007)(76116006)(2616005)(66476007)(8676002)(36756003)(71200400001)(38070700005)(38100700002)(86362001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?R1E3ZnNGa2VIYnBxR2tXeDZaOHpOMnNZNzhmUVAweTg2L0lXSTh2QSsrelZU?= =?utf-8?B?QXdwSFdCWFdCVHovVFh6REp4N3Z5VUFDaG5FZXc2TW5NemtlaUxIcmx0ZnJt?= =?utf-8?B?bnBKZ0dweVdFeVl3Vnk4NFlwaDVCQkg5R2ZMcGZBeWpVQmFPdWRQRFRNaGMx?= =?utf-8?B?N2pkU2R1Wk9vamU2RHhZOFRwMWovT1lRbzNuc3JSMVQzYUFzYWNiWWxod0Zp?= =?utf-8?B?aXZlUk82VHo4eGZsNC84U0pyNS9kR056eDAxMVk1SFk0THRhejlwOUlrR1VP?= =?utf-8?B?Z2t6S1FYREswZHhoaEovRDJEV3hibENBK2FabnE2bnNvSXNlL3BXV2NEcFVZ?= =?utf-8?B?NlRSUlVwYW9xYWFSWWllc2ZiN1AzeVlHNFUwdVNqdVVCRnZvS0d0MHV0eFZv?= =?utf-8?B?UThuSCsreEdrZks5SUxBNXhROWZpb0tzL2UrSXUzVWRpN2ZyaDJiYmJaZUZs?= =?utf-8?B?VktOSzJCTkswMU1LNHJiMFl4WFJLY3J3dmxuQUxDYlhNUnEzN3RrNmxRUHU5?= =?utf-8?B?MDZhSUd1ZG1XclowQmtmbHlaVXRIL2haRXZzdmFiMzZnVmNyNjNCVlpUSVdG?= =?utf-8?B?dG1qVkNjM0FTOFJFNk90dGx6enlrdE5hZG0vd0JDeDdrUTMxYkk2THNPSzVp?= =?utf-8?B?a2hwYVN4NWhmcm83S3o5VEpyVHc4TmJUUUhCNjdMdVlMdnlZVGIzK3RJemNt?= =?utf-8?B?MzhwT1p3YW1MTit4eE1PNllZa011djNXU1hyVTAvYXpSSlYyZG40ZnljVGM2?= =?utf-8?B?NThSbjQrS1RVejhMOTV5U1kweWVqOFFiZ1JmWngzb0R1RnQyWS9sSFRldndm?= =?utf-8?B?aGVFRWZndC8vRVZjVDJOQ1dPVlBXSTNqUTdYeUdGcjN6R1diUjRtVGNWZlBM?= =?utf-8?B?UGRYNjh6RkttaisvNy9TaU1CT0JRS1FOVldVK2pmVFdTMnpWU08yMWZpWmFm?= =?utf-8?B?eTgzS29aZnByVzBVWWlXUlp3STZMazBydVRFRkNvdUpYN00wMWc2a2x3U0xl?= =?utf-8?B?N0pIc1d5UjBuS0NacnJRRUc0MWhTNW1Ca0NQblZOZmQ2WU1qa0RsTzFBRWow?= =?utf-8?B?QXdTbW1BYUVhVytaa3JKSnBLbTdIL0JKVEFxbGtiUmtucTlkRVVyT2hwYW9r?= =?utf-8?B?RUZ5WC9pTlpaSjJoR1pycW1mTUxCVXVxQmhIQ0lQQmowUmNSSHE2RmpKZUtL?= =?utf-8?B?NlVDU25OeS9FTy9ZZDYxcnkwVmE0S0dYRzNLbExFenBEbkZUUDdOUVV5c3hv?= =?utf-8?B?L0ZXTjhNSUdQaytxUituNVlKanB2V01waTNWUGw2bk1SREt5UmIrTTNERmNO?= =?utf-8?B?SkFESkxwQXlJWWF4TE1jby9ITDNZNDZZU1E0SXpHTHg4ajQ3R3l3alpwRWZM?= =?utf-8?B?dXdLbnIweTBVK3FUajhLcEp5d3NpSnIxcW4yTkVmdlU4Q1FtMlFSaGhyQlha?= =?utf-8?B?dmNsNXZPWkc4Yng2YXgyRnpuZ3h6b3E4T3VPc2xHeXM5ZThMRlp4cnFySXVV?= =?utf-8?B?ZURkSGdsb2hmMzVDeCtZZDJra3IyOHFmMnR1S20rUUU0eG5SN1drRzZoeW1k?= =?utf-8?B?TkVvK2lyd044bjhWN2IvaFpXV1p3UGE2clpEQWo1ME1LRVRabDhrRnlIZVBQ?= =?utf-8?B?NUZ5OVJwSDNYMzFDVzFZK0NTSUl3NHhYc3MrM3c1VHBKb0ZyUktoNGpRd2NG?= =?utf-8?B?Mk9obUVjL1NFNjZlOVFFN3dWWkE4M2gwcGcrMFpLTklhZDdUSkJJVi9FMll5?= =?utf-8?Q?6K3fzFpUwJC5FhZqtRHtD/LLUHA7MCZHHLQrawJ?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: fd2c0922-fd30-42a7-2110-08d9846eb4ce X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2021 00:02:06.2853 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 4sVQko4oRTLaaCpN5BVnt41uEg2DOc+AML8Lmxdqng5HPAHxdf/1ubo+opXVADFwHM+8dUidfnyQBR1jXxnKAA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2503 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gVGh1LCAyMDIxLTA5LTMwIGF0IDE2OjA0ICswMDAwLCBKYWNvYiBDaGFtcGlvbiB3cm90ZToN Cj4gT24gVGh1LCAyMDIxLTA5LTMwIGF0IDE0OjE3ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3 cm90ZToNCj4gPiBUaGUgbGlicHEgbGlibnNzIGltcGxlbWVudGF0aW9uIGRvZXNuJ3QgY2FsbCBl aXRoZXIgb2YgdGhlc2UsIGFuZCBuZWl0aGVyIGRvZXMNCj4gPiBsaWJuc3MuDQo+IA0KPiBJIHRo b3VnaHQgdGhlIHJlZnMgY2hlY2sgb25seSBzZWFyY2hlZCBmb3IgZGlyZWN0IHN5bWJvbCBkZXBl bmRlbmNpZXM7DQo+IGlzIHRoYXQgcGllY2Ugb2YgTlNQUiBiZWluZyBzdGF0aWNhbGx5IGluY2x1 ZGVkIHNvbWVob3c/DQoNCk9uIG15IG1hY2hpbmUsIGF0IGxlYXN0LCBleGl0KCkgaXMgY29taW5n IGluIGR1ZSB0byBhIGZldyBjYWxscyB0bw0KcHNwcmludGYoKSwgcHN0cmR1cCgpLCBhbmQgcGdf bWFsbG9jKCkgaW4gdGhlIG5ldyBOU1MgY29kZS4NCihEaXNhc3NlbWJseSB2aWEgYG9iamR1bXAg LVMgbGlicHEuc29gIGhlbHBlZCBtZSB0cmFjayB0aG9zZSBkb3duLikgSSdtDQp3b3JraW5nIG9u IGEgcGF0Y2guDQoNCi0tSmFjb2INCg==