Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCUuq-00030R-I0 for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Feb 2021 22:03:24 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lCUuI-0004OU-JL for pgsql-hackers@arkaria.postgresql.org; Wed, 17 Feb 2021 22:02:50 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCUuI-0004H4-0r for pgsql-hackers@lists.postgresql.org; Wed, 17 Feb 2021 22:02:50 +0000 Received: from mail-dm6nam11on2047.outbound.protection.outlook.com ([40.107.223.47] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lCUu9-0000og-HT for pgsql-hackers@lists.postgresql.org; Wed, 17 Feb 2021 22:02:48 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PSvKFu4a9oXZlle7FHWezwOFv9LYWpBzt+jynxREVxi2+RBukH6s0WvQpbfwSD9iaKRscBPvCdFCUFc+IFnVvGpwdS6TlGmr8dj3Sjaq5jAuwfCZgLTm5oRiVg+7+q+Rb18va84V6dUFDpX3kcZ54r1F8t4EfT+YWmfgW7HRB+Yg/xmHH/F6S/LmV6aMjfNRXxzbWERffKZAdFSNMZ8/XFircjkuW1WX5c5UVZVfSJoNfoC/Yo6Wc20uh3T0EtpU612N+J7zO72NJmlkb+u8TrOKwPlQV06PYsdRAeNRSg+IW6CxT/goXNqqZHfssIe3ZgLbescXD3w6Tlf7Ng6UMA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3Wg3BSxmfRpU95I6El7R09OHvlfpnhqwJmZ7RCrzZAs=; b=J3SuED6MHEBSi55CPxFQpROwezwnqLfrS9sj+FOe4kO+NxHooQ7/45YJVjyFe/jtnu0hx0Ac77/HQPI1XLJ04X2SMgl7Cc6PIkKPKIdZ7vAHNuGAapl+cOIAxDiV2WIwf0TN0zbIRqu1k5kZ+H00cfbwWYa0xoRIc1QPYb9fT0+37pEmf5NbOkF9THlYYS/KixJtKSMYWlIx1wHejgSq6SY9FcVCatYUv2pW4aubF5WcFoXd6alZM0r6p+fJinI63+aFIrL3UyCaHUa3ve/k6Chs2H68nJjPI4ksCjvBeRCMav6N/wun9/n3DGqVUSt3Zb6bELMmCyPOcABXxe5DCg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3Wg3BSxmfRpU95I6El7R09OHvlfpnhqwJmZ7RCrzZAs=; b=KQxEnhkAUWHgRo1nCyMOMsr5+mwpYco0w8MDoFRMpveHpY4eWSTkGYR4bPcdrSqVCef3dQNjXAIiFnVOLlkVh9qLHVFyPk2ZZym3uTePbkZwTdqNvUNWOLI1s9sPFHh/qx67X3zfDnpHOxxCpCiwYcDdgCEYX98EBRZ8Nbc2O+M= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by CO1PR05MB8103.namprd05.prod.outlook.com (2603:10b6:303:f1::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.11; Wed, 17 Feb 2021 22:02:38 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3868.027; Wed, 17 Feb 2021 22:02:38 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "pgsql-hackers@lists.postgresql.org" , "thomas.munro@gmail.com" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46jppuyAgAxS7QCACpBtgIACrTAAgAZM+gCAB0o1gIFMW7EAgAFUH4CAAAwGgA== Date: Wed, 17 Feb 2021 22:02:38 +0000 Message-ID: <78ae2dcf73f64b95a62813ebe5a8f4e1ce681b7f.camel@vmware.com> References: <3D2C67F8-7EE6-4534-BE8A-BDD828562672@yesql.se> <383EE7EE-ADEE-4C48-8E7B-28B361E5EA3B@yesql.se> <054312F2-4D32-4ED9-A6A9-CA05221858CF@yesql.se> <4b4e3a27cc56921d2acba2c25823fd2fc325b842.camel@vmware.com> <06EFBB38-C0D2-440F-95CB-9B3AE4F97E82@yesql.se> In-Reply-To: <06EFBB38-C0D2-440F-95CB-9B3AE4F97E82@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 55439474-31e8-4c8d-e556-08d8d38fbd6c x-ms-traffictypediagnostic: CO1PR05MB8103: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(376002)(366004)(39860400002)(396003)(136003)(346002)(6512007)(83380400001)(8676002)(966005)(478600001)(6486002)(8936002)(4326008)(5660300002)(4744005)(186003)(2906002)(86362001)(26005)(66446008)(54906003)(6506007)(53546011)(2616005)(6916009)(71200400001)(66946007)(36756003)(66476007)(66556008)(64756008)(316002)(76116006);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?M1ZJNjhJWG4xRmM1TTZqRS85TTlGWHBUWFIxNjR4WlY1NnR6a0E4ektKc0Zq?= =?utf-8?B?bGhDNmhrQlQ1OEpCV2FCZXNaQWFVU25RRjhtSldOOHRuTDdJZDlPbVlhNy81?= =?utf-8?B?RFVOWFBNZ1RoWk9wSDNxUkh5YVFabWQ4ZkFPK0pRN3dRQzNpZDNiOGJWQUxn?= =?utf-8?B?MzloTXpscEdVRkNXeUlrYlFxZXZVVWVVOU9OemdvRTlneHdLeFVYdWZVSlZN?= =?utf-8?B?dzBnNHR6ZkJGVEMyZ0tRS3Nha003ZXBOS2J6WEJEOVN6WUxpdVdha2JiNG94?= =?utf-8?B?V1JMejUyRXMrbHBBcFppNEp6QlR0L3VBbXFENEp4Ny91cmxmK3BsYmtUVTYv?= =?utf-8?B?dzVxWHEvTU9uSU9hWlpvWVJmUTJkRG5UWUZsTVVRY1gxOUhGcnhsMW9Gc281?= =?utf-8?B?RlMrN1duOC9DeGowRVk4YU9RSG1BZko1cktLMlNXcllNZ214RnAwTDc0SytQ?= =?utf-8?B?YUpLYXVnMVNZS2ZaSk9jZHlZY2VUaTQvaHo3K25nZEZya0lhbmhLZHArWGox?= =?utf-8?B?RElYaGtMcmZNYm5BOUt0cmdINlpWTCtpR3hkdlh5Yzlnbi9aR1ZNVmczY1k4?= =?utf-8?B?Y3Azbm9pZmFlZGYvRWJlT3hySjhndjhYWEd0YXBYSVo4ZkZoeEVHMm9NSENH?= =?utf-8?B?WUJpdWN0dDMrQy9temtYT2ozNngwZmxWM1UwbTBOb3l3N0N5czU2aEtiQ1N5?= =?utf-8?B?RW05MVlsU3JTWU4vWXhnMjdNeGtwY0ZSeVVGd1RQSW40QTBoVUFxUmZGTlBz?= =?utf-8?B?aGFFRkh5djc5OFNqeXJYTFZXd3oxUytFdnU4Smt6TXpmZ1ZkcnVFc2tnWlZZ?= =?utf-8?B?RFFMZSs4QkRreGRhZ3ZzeGNKRmJBY1MvbVRHWnZabTlWWHRJM04za0FUTjlB?= =?utf-8?B?WmhoQWo2U0E0c2MrellMNXpXV3hyNjNmeVloNmdqQVNwaGN4ZkVWemZVcUo5?= =?utf-8?B?MTdXYVdsK3ZIS0hkMTJwbkdyWVlJU210MkN3SXYwODgrSFZ1akJ2WE1HaEMz?= =?utf-8?B?SWxMRjlpQXpsb2dBVnlQU1FUOXdiYmVLRVV4dGpoaWVObUdJQUdyb0Vaak5D?= =?utf-8?B?R01kMlZnRm1zV2gxZ0VuUENNejhucU9UZ0JnaTZJVjRzRWljVUt0TEhYd2tW?= =?utf-8?B?SmVnbk9RdmlpaUZXT0RUakE5YjNxMFc1STdYNnJ3elMvUmhZcXNrNS9EdTBp?= =?utf-8?B?Y2VBK0hhL0JnQS9vM0p6Qzl6N3BnczBwMGJ4Z2NPdDBLalNDN3NmdUxRb1FV?= =?utf-8?B?Z01qTit0S3NjMFNGc2dWamZiSFEzY0U3ZTBGdC9RcTJ6K3ZRa0c5T1MvNVR1?= =?utf-8?B?L3B3QU95L28zTkFEVFdnelZqc21QWU5ZRUdBVW41VVNBeU9rQ1JxMEVITjdL?= =?utf-8?B?Z1JiQ0swV2hDaEttZVZkRmdUVFZGRTRuSkF6b0tSazBiQU56YVNyNk5pNmdI?= =?utf-8?B?TXZIdGRkSU1LdjdVTWNQYnlWNUV0b0ljUE5Obmg3VlEyRkMwNW1Cc2c5eXhC?= =?utf-8?B?NlFWSkFUMEJJSnd6OGY0bFB0YmEzWi9PYTFURGhVYXRhZFN0VmxUdTBqY2s2?= =?utf-8?B?djM2UzlvNCtncVZrYjJvUEdHQzdpdlZmL0w5amJhYXh1dTFkZEdwSXVQL0pW?= =?utf-8?B?WVA3Z08yMVh1RFkwNWtWU3VFSHE1eXRZcVpZdks5dkhlZ0RwUnkxblBrT2Rz?= =?utf-8?B?bDdrWmhNMTR6LzlQNUJwL1MvRkd2OEl5TUVkOGt3VGNIZzIwUGk4a0ZHaUNI?= =?utf-8?Q?5mW4qxrV+uTSg1I+cAU2x1m9zrHsVdeQ5rEo420?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <0E878BE2753B4C4AAD634598A779F920@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 55439474-31e8-4c8d-e556-08d8d38fbd6c X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Feb 2021 22:02:38.3530 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: H+xGSBAigTvNcmphDb/P8BnTDRkcuLC9FP3eXRqPqt97wx1X0ms6svW4f046n/t+p/o50R/gGgNMGFOj0sQVBw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8103 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gV2VkLCAyMDIxLTAyLTE3IGF0IDIyOjE5ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAxNyBGZWIgMjAyMSwgYXQgMDI6MDIsIEphY29iIENoYW1waW9uIDxwY2hhbXBp b25Adm13YXJlLmNvbT4gd3JvdGU6DQo+ID4gV291bGQgdGhhdCBiZSBkZXNpcmFibGUsIG9yIGRv IHdlIHdhbnQgdGhpcyBpbnRlcmZhY2UgdG8gYmUgc29tZXRoaW5nDQo+ID4gbW9yZSBnZW5lcmFs bHkgY29tcGF0aWJsZSB3aXRoIChzb21lIGFzLW9mLXlldCB1bnNwZWNpZmllZCkgc3BlYz8NCj4g DQo+IFJlZ2FyZGxlc3Mgb2YgYXBwcm9hY2ggdGFrZW4gSSB0aGluayB0aGlzIHNvdW5kcyBsaWtl IHNvbWV0aGluZyB0aGF0IHNob3VsZCBiZQ0KPiB0YWNrbGVkIGluIGEgZm9sbG93LXVwIHBhdGNo IGlmIHRoZSBOU1MgcGF0Y2ggaXMgbWVyZ2VkIC0gYW5kIHByb2JhYmx5IG9ubHkgYXMNCj4gYSBm b2xsb3ctdXAgdG8gYSBwYXRjaCB0aGF0IGFkZHMgdGVzdCBjb3ZlcmFnZSB0byBzc2xpbmZvLg0K DQpTb3VuZHMgZ29vZCwgYW5kICsxIHRvIGFkZGluZyBjb3ZlcmFnZSBhdCB0aGUgc2FtZSB0aW1l Lg0KDQo+IEZyb20gdGhlIHNvdW5kcyBvZg0KPiB0aGluZ3MgbWUgbWF5IG5vdCBiZSBhYmxlIHRv IGd1YXJhbnRlZSBzdGFiaWxpdHkgYWNyb3NzIE9wZW5TU0wgdmVyc2lvbnMgYXMgaXQNCj4gaXMg cmlnaHQgbm93Pw0KDQpZZWFoLiBJIHdhcyBnb2luZyB0byB3cml0ZSB0aGF0IE9wZW5TU0wgd291 bGQgYmUgdW5saWtlbHkgdG8gY2hhbmdlDQp0aGVzZSBvbmNlIHRoZXkncmUgYWRkZWQgZm9yIHRo ZSBmaXJzdCB0aW1lLCBidXQgYWZ0ZXIgY2hlY2tpbmcgR2l0SHViDQppdCBsb29rcyBsaWtlIHRo ZXkgaGF2ZSBkb25lIHNvIHJlY2VudGx5IFsxXSwgYXMgcGFydCBvZiBhIHBhdGNoDQpyZWxlYXNl IG5vIGxlc3MuDQoNCi0tSmFjb2INCg0KWzFdIGh0dHBzOi8vZ2l0aHViLmNvbS9vcGVuc3NsL29w ZW5zc2wvcHVsbC8xMDAyOQ0K