Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lOr1v-0006m2-UC for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 00:05:48 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lOr1t-0001JF-Q2 for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 00:05:45 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lOr1t-0001J7-3h for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 00:05:45 +0000 Received: from mail-dm6nam12on2044.outbound.protection.outlook.com ([40.107.243.44] helo=NAM12-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lOr1p-0007up-IW for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 00:05:43 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HXyMnzzHkioEOtc7se+cLKiBiRR55Yz6szktQAKM9ufOj1Fths45jJF9R5LdlsAoUaeBts51vJNYU/isu1OEG4WxCj65WeYWQtihPq+XcWJ5bn/iPu/vUgh9BDhEucMo/vgN8CNp2YYsRcCR8QP0qsSN+ZHx9HqVKdj06d+okY+rGkez+GYfwCi+EpsBq4fmdeqwxIrT11IR4xEoChESAinLBjWVdFfep8n4BJV4S42M/SMJ02dEN5O30b1OUHNiHmgDi7FklecyV7Y4JzAm3Y5KDUxF5PuF5GiY+Vo41Zv4JyqtEKNMBB2i7UMb6WdXdO4LXYCUprXDlVx4gB8WLQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zpA42hCNEMXHBtOlERh9UKIzbs527Z+1U1mK37/y818=; b=IyFj+rH71ePcbyPL20bJsTWsC/zTlDv44syh0HuuzZvxo1Txp0lUC7+BIBr+61yIkl9936kAVPsOeqx8EjRQXSPiGBM33kTDOtCXG6kcEKPTHCcrJWWRthDVRxVwLa6WKcsfZAfdxn7pcymZo8gdWSiJzWGlryrwc+7W1uVXOupjg1vnFt+eRVKUA+09YFFMpEV+GCdRFKhokr0S3ym/pQ7eJOWjuLMZAojS+LYdprp4tqUi147KNSNXTbk6Xcqag6fXLjeb4zCDH5Y4oeUiE6BFZhz1cm7THK8oqWkY1gvSdNhwnKI1hbe6GPDMffJ0n8O5dpMfxIUGLd8v8nDMLg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zpA42hCNEMXHBtOlERh9UKIzbs527Z+1U1mK37/y818=; b=kgZUt5PIsQCI+X8BmstVoKrFSAAs/6CPk0ynxTqvIlG1fy1nT6zLQoXvn/eAogjd+pgJD/XF/6Ldb0FhX+JpUUenc36yzVdZdNf5t3BQzi9HXQGfWJyFJlBf23DAUI6kWQ2ZtyOzklY3aeQXhxxBYb7noVbUA6mDuVJRRrEz3+g= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR05MB2815.namprd05.prod.outlook.com (2603:10b6:300:5f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3977.9; Wed, 24 Mar 2021 00:05:36 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244%8]) with mapi id 15.20.3977.024; Wed, 24 Mar 2021 00:05:36 +0000 From: Jacob Champion To: "daniel@yesql.se" , "sfrost@snowman.net" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEAgAXTZYCAAkVWAIAAzGsAgArFR4CAHUTDgIABj0AAgAGZzQA= Date: Wed, 24 Mar 2021 00:05:35 +0000 Message-ID: <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> References: <6C7A2D6A-3D05-4C3B-B1DA-C96E97F31AC6@yesql.se> <0F5CF84D-26F1-44D0-AEAE-E011D3CEC0E2@yesql.se> <686dd2b189ec04b161f71481f1f726255ee8224f.camel@vmware.com> <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1ee9b9b5-4d4a-4cc6-b871-08d8ee588cd2 x-ms-traffictypediagnostic: MWHPR05MB2815: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(39860400002)(366004)(136003)(396003)(376002)(346002)(38100700001)(71200400001)(86362001)(26005)(8676002)(54906003)(110136005)(478600001)(6512007)(186003)(316002)(36756003)(6506007)(6486002)(2616005)(5660300002)(66556008)(66946007)(64756008)(66476007)(4326008)(76116006)(2906002)(66446008)(8936002);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?S0tTRERzK3I2bzF1a2YrS1E0NnpDZmNsMW83QWlxOEJrdXl1RUJOK3Nta0dH?= =?utf-8?B?YVFVT2hlSmVQZXlRR1VIMmVaTmRIR0NPQkZVaVFlbnlmeGVheHpqMThzckhw?= =?utf-8?B?YUFmTjk5emxZWmcvTm5lRlRYR3JJSHRrR0J6VDdFVlNDMlVHaWwveVhHS0Rn?= =?utf-8?B?RHZLTm1MNHBDbkRKeVZRaVFYU1lST3JxSHhuVlBwZ2hYR0FJTi95cmVheDl5?= =?utf-8?B?Y2pPK1FJNGJlQ3ZKM3M4SVhYcmRYcXZMdTMrRjU3L2lZeFhVYTdPWVg3T2xa?= =?utf-8?B?dXRtOVFqRjdob1ZUKzhqN29KQmZlaXdtZVVlZkx3YTdPU3BaUFE1ZFNaYm4z?= =?utf-8?B?S1JNaXZIRll4dlZrZ054TGNOOXUxUG5IOWdvOENzaFFrV2VGdllFU3FyZGRh?= =?utf-8?B?Z3FKaC9ucUdmRWM3b1R0MFdCSlVtODRjSnpnWG5Xbi9uMXRueitzWVI5bG1K?= =?utf-8?B?SEdnT2ZLMjJtTktzOGhDOXpQMFgySkQwMmk3UEZLbGZOZ0ROZ05RZlYrdDkv?= =?utf-8?B?T212cDMxUmlZRkxNNVR1L21ZaGFlZGhQbkZzbU9xS0g4VDg0MlNuWjB2d05x?= =?utf-8?B?ajV2ZFR5bTJ1MTZWWGoxcmxMVTJ2TUZpaWh2VnZ6em51V0NxejhvU1l4YnFC?= =?utf-8?B?ak9tbW9yMmh1NWVjTHZqdEcwcmM5anh1MkVCZE04K1M1ZUEwQWJCTEc3M2tE?= =?utf-8?B?MExQVW5BYXNSRUpyNjgyVVl1bTNaenVBTnd1Zk4wRUlsOXJ0Mm9oUjNMTVZC?= =?utf-8?B?UnZoMkNiUVJLckxrVDY4cEF1Q21LRU5HVzlQOEVwV21TKzM0cWxQWXlDSi83?= =?utf-8?B?bVA2VUNFQ3d6N2REMHBsdUdBUDBEdGlXRHF0ZzdmVHFpSW0zOTBpT1pML2Fk?= =?utf-8?B?THpYVkRIR1RndjhZakk4cUc5UWgva0dIWkxuZzZtelo2UjAxd01HZUVRM1No?= =?utf-8?B?bHJhVElVenZGeUhURzFoVVVYTzB1SDRFZGVjNWxadmx2Q1puZ0ZYYTJDNEpW?= =?utf-8?B?QzhXUEJPQkp6OE5LWjl6ZkQrcmZzSWZxWGJqMzhCNWhVSHE1NUZTSXhXTWpP?= =?utf-8?B?cXYwZEh4T1Y0Tjh5bHI2TURtdXp1SjdsV2wyTm82TU5FSCtvUzBaL2JHdTVB?= =?utf-8?B?Z2VqdzY4OHFkdzE4dWZYK3J6WEExekZFNzc3ZURxOWFublZkVFNMdlRESlE5?= =?utf-8?B?VTVHWXliUmsyNGVoQjVWeHg2Y1JvSzR5bW8vU0EyY243TTNPUVlaMFNqMHI5?= =?utf-8?B?a2Z0Nzhjb25obUd5djVvMUFJMXJyTHArWWEyNU5ZN0w2MjF6TUE3dEhLRGty?= =?utf-8?B?dXkxaHUrZm1qSWVoRjd0NlZGWlBhS2VBSEFCd3JCZGVIejJ2U3VMYzZoQk0w?= =?utf-8?B?Y29zWk90aUpVd0lZRU0wV3k5d2Y3cmNPQjhBR05tZjRQcnc1QUdxeXNFeGRD?= =?utf-8?B?Tlpic0U1eGhDU1EwUDlJamdBc3VJYThGQ0x3RWxFcy83VGRNNnZ4UHVNTzVi?= =?utf-8?B?SmJNS0lQSFdwWHZVUFFsME5SdytFVVNKL3JiZkI5blI1Y05EelBpOERYa3hH?= =?utf-8?B?N0JCYUlDdHB3cGsxK2dSOHkwbWhqNW5EcGlNS2pMQmRSWktvd2tQeEowejF1?= =?utf-8?B?N2pLTjNsSWlKZkZZU3NoY0VIVDlmQ2xibHN4dzVIcVYxR0FEQ1VEYUZsaGFi?= =?utf-8?B?bmZ1N0cxVTFlbGRRZDNHSU9uNWM3RmRZWHBjcXJxeWRaVlJoTjJZQWp6eTBL?= =?utf-8?Q?RfB1LPYthXlD7dZM7Qc2rs4AWt45G4+SgR/Upge?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <3C80B5287D0AE24B90348F464B65D2E9@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1ee9b9b5-4d4a-4cc6-b871-08d8ee588cd2 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Mar 2021 00:05:35.6979 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8VansRsLNtts7y1ig8Qs3mdU+UwCNark/WQ4Joe7Aj7hifICHW5RDh6jydEF/X+6eKnutAsmAHlW3r52S1CEEw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB2815 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gVHVlLCAyMDIxLTAzLTIzIGF0IDAwOjM4ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gVGhpcyByZWJhc2UgYWxzbyBpbmNsdWRlcyBhIGZpeCBmb3IgcGd0bHNfaW5pdCB3aGlj aCB3YXMgc2VudCBvZmZsaXN0IGJ5IEphY29iLg0KPiBUaGUgY2hhbmdlcyBpbiBwZ3Rsc19pbml0 IGNhbiBwb3RlbnRpYWxseSBiZSB1c2VkIHRvIGluaXRpYWxpemUgdGhlIGNyeXB0bw0KPiBjb250 ZXh0IGZvciBOU1MgdG8gY2xlYW4gdXAgdGhpcyBwYXRjaCwgSmFjb2IgaXMgY3VycmVudGx5IGxv b2tpbmcgYXQgdGhhdC4NCg0KSSdtIGhhdmluZyBhIGhlbGwgb2YgYSB0aW1lIHRyeWluZyB0byBn ZXQgdGhlIGNvbnRleHQgc3R1ZmYgd29ya2luZy4NCkZpbmRpbmdzIHNvIGZhciAoSSBoYXZlIHBh dGNoZXMgaW4gcHJvZ3Jlc3MgZm9yIG1hbnkgb2YgdGhlc2UsIGJ1dCBpdCdzDQphbGwgYmxvd2lu ZyB1cCBiZWNhdXNlIG9mIHRoZSBsYXN0IHByb2JsZW0pOg0KDQpOU1NfSU5JVF9OT1JPT1RJTklU IGlzIGhhcmRjb2RlZCBmb3IgTlNTX0luaXRDb250ZXh0KCksIHNvIHdlIHByb2JhYmx5DQpkb24n dCBuZWVkIHRvIHBhc3MgaXQgZXhwbGljaXRseS4gTlNTX0lOSVRfUEsxMVJFTE9BRCBpcyBhcHBh cmVudGx5DQptZWFudCB0byBoYWNrIGFyb3VuZCBsaWJyYXJpZXMgdGhhdCBkbyB0aGVpciBvd24g UEtDUyBsb2FkaW5nOyBkbyB3ZQ0KbmVlZCBpdD8NCg0KTlNTX1NodXRkb3duQ29udGV4dCgpIGNh biAoYW5kIGRvZXMpIGZhaWwgaWYgd2UndmUgbGVha2VkIGhhbmRsZXMgdG8NCm9iamVjdHMsIHNv IHdlIG5lZWQgdG8gY2hlY2sgaXRzIHJldHVybiB2YWx1ZS4gT25jZSB0aGlzIGhhcHBlbnMsDQpm dXR1cmUgTlNTX0luaXRDb250ZXh0KCkgY2FsbHMgYmVoYXZlIHBvb3JseS4gQ3VycmVudGx5IHdl IGxlYWsgdGhlDQpwcl9mZCBhcyB3ZWxsIGFzIGEgaGFuZGZ1bCBvZiBzZXJ2ZXJfY2VydCBoYW5k bGVzLg0KDQpOU1NfTm9EQl9Jbml0KCkgaXMgZ29pbmcgdG8gcGluIE5TUyBpbiBtZW1vcnkuIEZv ciB0aGUgYmFja2VuZCB0aGlzIGlzDQpwcm9iYWJseSBva2F5LCBidXQgZm9yIGxpYnBxIGNsaWVu dHMgdGhhdCdzIHByb2JhYmx5IG5vdCB3aGF0IHdlIHdhbnQuDQoNClRoZSBmaXJzdCBkYXRhYmFz ZSBsb2FkZWQgYnkgTlNTX0luaXRDb250ZXh0KCkgYmVjb21lcyB0aGUgImRlZmF1bHQiDQpkYXRh YmFzZS4gVGhpcyBpcyB3aGF0IEknbSBjdXJyZW50bHkgaHVuZyB1cCBvbi4gSSBjYW4ndCBmaWd1 cmUgb3V0IGhvdw0KdG8gZ2V0IE5TUyB0byB1c2UgdGhlIGRhdGFiYXNlIHRoYXQgd2FzIGxvYWRl ZCBmb3IgdGhlIGN1cnJlbnQNCmNvbm5lY3Rpb24sIHNvIGluIG15IGxvY2FsIHBhdGNoZXMgZm9y IHRoZSBpc3N1ZXMgYWJvdmUsIGNsaWVudA0KY2VydGlmaWNhdGVzIGZhaWwgdG8gbG9hZC4gSSBj YW4gd29yayBhcm91bmQgaXQgdGVtcG9yYXJpbHkgZm9yIHRoZQ0KdGVzdHMsIGJ1dCB0aGlzIHdp bGwgYmUgYSBwcm9ibGVtIGlmIGFueSBsaWJwcSBjbGllbnRzIGxvYWQgdXAgbXVsdGlwbGUNCmlu ZGVwZW5kZW50IGRhdGFiYXNlcyBmb3IgdXNlIHdpdGggc2VwYXJhdGUgY29ubmVjdGlvbnMuIEFu eW9uZSBrbm93IGlmDQp0aGlzIGlzIGEgc3VwcG9ydGVkIHVzZSBjYXNlIGZvciBOU1M/DQoNCi0t SmFjb2INCg==