Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCpzx-0001nt-4a for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Feb 2021 20:34:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lCpzN-0003tf-4y for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Feb 2021 20:33:29 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCpzM-0003tO-KP for pgsql-hackers@lists.postgresql.org; Thu, 18 Feb 2021 20:33:28 +0000 Received: from mail-co1nam11on2041.outbound.protection.outlook.com ([40.107.220.41] helo=NAM11-CO1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCpzH-0002qL-6h for pgsql-hackers@lists.postgresql.org; Thu, 18 Feb 2021 20:33:27 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JYzr5u2wZOdDeG0WKN+Ed1BariNKCWyxada9AO6vQxEOKfV5QdHwjx7uaFQsGmOSUUC2jML9ZOZLhrUjJdOY3U7NCG4ng1eRnZtGVssukAIapiz7dka+M4c2Orzw5FgI8u2yMHF9+tbhs1nFCFzYPEVZzP2XkA0NvTxPisi8H769GSyo6Q8slYOKCh4oGvO/6lgs881E6kIkbTNkoeITgFY8TdOnvaesZZHqCsr56nhRf3NN7KWkkdVwvWFH4ir0ATlMIk9k5WBJ1PBYes4+DRerfjEVANkBiIprZ5Fq07jY9sNUjS6qmc6gDfcHCnwmSlQzXaA2cA0oAqbZ4yzROA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4P/jRON9JSXTPT2WTtLngeG+jwXf5ybBHgl14qGdSZ0=; b=OGScpdYqCohYy64k696COTiuQ+gkvwSeOzUkjmgkxiAWmLBMFyC/VGf9WYqyFHIqPfLAWeJ+Ad4fL98+WU7M9d3VUQ28BemlRgitCVca3TyYRx2Tth/Vw3hxXJJzmTDUp58nbiowHdyTjFapk4k7NEgj1VBfmpDidM02ZzUsR3ZnvebQcm7kEqdMuHMCfrGkbYbtQJ0eFe5rPlUiUrKiJrU6LQZ6UPfhE1aZLBL5YBHLQbuNiYFS5+Ax7BL08+3cb8d2FZi0WTFMgQR8mQxL+xkJukNR0kMSL1BXVc4u7PzeE39VSRTCSi6lCDXDAq1taHFg6Is1vBCtOVuvus7jZw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4P/jRON9JSXTPT2WTtLngeG+jwXf5ybBHgl14qGdSZ0=; b=MoLkZNue0ga4O3sWXLozuVwsID+NntcstDUYVngeYe5cmmrpMeVRkuiqqJ7oszyZtEhzgIMyvwhGvSoerlp5XDbaNm4DLKjsCRemLgyj3ckTT0OkeMT2n8jb4HZ3X3vKOIZHGmYunrqJWXH5JcT2PGAWTNuAKcuDGxm968BMHMU= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR05MB3053.namprd05.prod.outlook.com (2603:10b6:300:b1::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.12; Thu, 18 Feb 2021 20:33:19 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3868.027; Thu, 18 Feb 2021 20:33:19 +0000 From: Jacob Champion To: "daniel@yesql.se" , "michael@paquier.xyz" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEA Date: Thu, 18 Feb 2021 20:33:18 +0000 Message-ID: <686dd2b189ec04b161f71481f1f726255ee8224f.camel@vmware.com> References: <8D7F95DB-8F8A-4300-BFDA-656FBAB30FE2@yesql.se> <5382CB4A-9CF3-4145-BA46-C802615935E0@yesql.se> <6C7A2D6A-3D05-4C3B-B1DA-C96E97F31AC6@yesql.se> <0F5CF84D-26F1-44D0-AEAE-E011D3CEC0E2@yesql.se> In-Reply-To: <0F5CF84D-26F1-44D0-AEAE-E011D3CEC0E2@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d4233d24-1258-4a2b-a321-08d8d44c6d7f x-ms-traffictypediagnostic: MWHPR05MB3053: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(376002)(39860400002)(396003)(136003)(346002)(366004)(2616005)(66946007)(76116006)(36756003)(64756008)(5660300002)(66556008)(71200400001)(66446008)(186003)(66476007)(86362001)(8676002)(54906003)(8936002)(4744005)(110136005)(2906002)(316002)(6486002)(6506007)(26005)(6512007)(478600001)(4326008);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?aXhualJDZFd4SmduNXFjWFJhTVFYWWlrQVpiaVlZZ1JPdDR5VzE1MVU3NmVG?= =?utf-8?B?aTlBazVoVy80dS9DRGRMT3djblhVY3BDenRYT29MR0tnekIwZ2NNYWVSMW81?= =?utf-8?B?QUtGSDI1WkVreDdPeU9IUmJmLzZZSmNPSlcwdlRDYUdEc3RGVE9IMUROTkYx?= =?utf-8?B?RGZhdWpDei81S1RhMVE5TlNwcUtoSkR3WSsyN0ZsMkQ3Sngrbnl6eTUrcS9B?= =?utf-8?B?Y0dnUGpLM2xHNHFuTkxiWUl5NzVUTHFQendHZW5GRXVTcklYakZYOTZmYU9o?= =?utf-8?B?SGhJZG4rTnRnclJhZEhWaWl4dXJsZGZsdVZ0cWgvYWxET0pJNS81WFFPM2Er?= =?utf-8?B?QWxNMWJqd2xzL0lsM3Q3YlZvVkRJNVNGWE01L3JnZWswRERrUVpsWGhwSTcr?= =?utf-8?B?dTZEcVhuNS83QXV5ZzgxNm0wVU82UmRpV2s0Z0lUdTRRdVoydW1SQ2VsdmxD?= =?utf-8?B?dkQrZ01TRVlURTg5aDN6NURSTytMUDhDZkhWZ1IxSUdjRDdTcEMwcnNVcVFI?= =?utf-8?B?TndvVStDK1RySXRnOWZXc2ZaRFg4eTY3MjdDWFQ0QlYvTzZtOWRoNjd4RFp3?= =?utf-8?B?aHJHQm5aNlFCb25KMEowb2lRS0VUSEVSTG5sN1dDM2ZhazFqR0FxUXQxU09H?= =?utf-8?B?MTZsZGNqNWZmZWo4R1IrTmY4aXdFamk4bkVOd2EvR0t3ZjJ0S0d0RmE3ZDJm?= =?utf-8?B?SGFETzFiMDBxQldMTkhhN0xxN01wN3JZMVpqQUR3THlyNmx4amZzVlYzSjUy?= =?utf-8?B?cUQvUm54RTI4enpmV3B5MzBXcldVZ2llRkkyMjZKUFBJQ1RIaXBaVWxJUlY1?= =?utf-8?B?TEMzMmpOYnk5d1d4eE9pSGN5UG1PL1lEUnp4R1N5ckFldFN1MjZ5a1BkeGM4?= =?utf-8?B?bFJkT0JqZU91MmdPSW8rSHhiSG5qRXhvTmFyKzk5WEVFeVdWSCthUCtCUjFp?= =?utf-8?B?MTFTb1owYUNEcGZicDZrVmRyTzR4dWsrSVlhK0lSSTJrMCtDSkJxUWtiZGcv?= =?utf-8?B?ckFKVHdlVThIL0VQeHJRWDNBcXlEN3dvOGJ4aHZvRG1EWHpXTjhuWHNSUmdD?= =?utf-8?B?OEw1MFpnNGlscWxZbFBTVkM4VktvbFhJU0JpTXZUMWRqejFjUmh1TUphY3Fs?= =?utf-8?B?N3ZZd0V5U0hqSkg5ZE9LMCtHbVNIeElNYnU3YnBudXFuSE5Ibi9Dbzhqd0J3?= =?utf-8?B?WStEdkdkZ1oxSTQvK2Z1NjZUYW5YU1hpM0FISGFsRVRydUc0U0xHY3cwenVR?= =?utf-8?B?Tlo4SUM3V1FXcm91NVE1UFRmNFo2VmtHUEpzZ2puV1hsUElzbFNkS2NyOGNT?= =?utf-8?B?S0EvZkRMMzhRdTZFRjB6QTFVZnlqUzNJT1RiVnZmbkxhRFM1c2VyL093K1hx?= =?utf-8?B?NmcyWTliSUJhZFdJcWcvdktTVmtRaWc2OTEydjVtMXVDeXhINEkySEVMQ1F5?= =?utf-8?B?MWkvQ2hFRVhxVFJzMFY5aGtnOWlDUGtTZDl1VjA1bjhXTG5ZbkR2blBpMGhi?= =?utf-8?B?T2NpRHN3MkdzSC96S3Uvd0g2L2lWQzlmYVh2RDlVVUtibnFQTFRhLzVIZnBp?= =?utf-8?B?YitpKzdQWHZqZGIrd0NpRGdTQVNYMjR3eHBwVEV5anpSVlpHOFMwN2ZYZDV6?= =?utf-8?B?dzBDdnA0ajRtTGtHOVN0enZDYjNYUjBtclEwZ2swWVhJdzVYaG1iTVZVdHdk?= =?utf-8?B?d1gvVjM2aWVpcFVDOWlvTEkxekdFSDFHNm5ESEVsc2IrblV0TEx1anAxMEZM?= =?utf-8?Q?s8R+w/mZcmsPfKalt/HULJmFnkutb54Q2eItoSW?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <74CFF87765731245AF09469F3DF93845@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d4233d24-1258-4a2b-a321-08d8d44c6d7f X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Feb 2021 20:33:18.7931 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NHaMzE2lTem8J/gkVIzMrk5JVRa4q+9QJMoPCb0hu9zytYstdYkuHjwUkHIcvAo1WS2mCqk0sqD6ZKZYSQrQDQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3053 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gV2VkLCAyMDIxLTAyLTE3IGF0IDIyOjM1ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gQXR0YWNoZWQgaXMgYSByZWJhc2Ugb24gdG9wIG9mIHRoaXMgYW5kIHRoZSByZWNlbnQg Y3J5cHRvaGFzaCBjaGFuZ2VzIHRvIHBhc3MNCj4gaW4gYnVmZmVyIGxlbmd0aHMgdG8gdGhlIF9m aW5hbCBmdW5jdGlvbi4gIE9uIHRvcCBvZiB0aGF0LCBJIGZpeGVkIHVwIGFuZA0KPiBleHBhbmRl ZCB0aGUgZG9jdW1lbnRhdGlvbiwgaW1wcm92ZWQgU0NSQU0gaGFuZGxpbmcgKGJ5IHVzaW5nIE5T UyBkaWdlc3QNCj4gb3BlcmF0aW9ucyB3aGljaCBhcmUgYmV0dGVyIHN1aXRlZCkgYW5kIHJld29y ZGVkIGFuZCBleHBhbmRlZCBjb21tZW50cy4gIFRoaXMNCj4gcGF0Y2ggdmVyc2lvbiBpcywgSSB0 aGluaywgZmVhdHVyZSBjb21wbGV0ZSB3aXRoIHRoZSBPcGVuU1NMIGltcGxlbWVudGF0aW9uLg0K DQpmZS1zZWN1cmUtbnNzLmMgaXMgbm8gbG9uZ2VyIGNvbXBpbGluZyBhcyBvZiB0aGlzIHBhdGNo c2V0OyBsb29rcw0KbGlrZSBwZ3Rsc19vcGVuX2NsaWVudCgpIGhhcyBhIHRydW5jYXRlZCBzdGF0 ZW1lbnQuDQoNCi0tSmFjb2INCg==