Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kzjcr-0007kA-M3 for pgsql-hackers@arkaria.postgresql.org; Wed, 13 Jan 2021 17:08:06 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1kzjcq-0004sw-GC for pgsql-hackers@arkaria.postgresql.org; Wed, 13 Jan 2021 17:08:04 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kzjcp-0004rD-VD for pgsql-hackers@lists.postgresql.org; Wed, 13 Jan 2021 17:08:04 +0000 Received: from mail-mw2nam10on2085.outbound.protection.outlook.com ([40.107.94.85] helo=NAM10-MW2-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kzjci-0004KH-R3 for pgsql-hackers@lists.postgresql.org; Wed, 13 Jan 2021 17:08:02 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SkMIUuFl4BUPuVY6trvE1oQGvBSJTub5OvnwhUaPS/9riNk+GdUDetrFJGQEwlyxY2H4yaSDZg4atKsO7q0ZNuQ+XXS48xeUETRV17n9y/dZ/utvqIcy7uShpQoMTNv0nyni0Ymsw+U0ZkGOBqF2xZL09noH7lwinmmiRUCKsAByGj0rNOd3vhzmI8lW4gZOvEA+aicau3P7pqZrit0b13ZlAJZKN11Oop23PJBDesZ+fc+JqR26p8KJ+1bsuXtRC9KOD5uXVQMbpTpUc2FXS11m/H7OEpxG4udDA+VghWox6Wk/E1FEteBtMIsMOZXBpvAfWsRGURmjSPalIZ2alg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3unNIQVHg781UyKUzBZ2pWEwaYzEdvBwMuHDTHI/FMA=; b=NCjXymFEbQiWfajMI6UM2ZOWLfd5on0tXpyhy1l1zL8zfu5fiL1u8dz4DQfp9jr1zTKMqr+5Wu0kQREvM7bAOAM37cR/OzEr2fh5Pu7atpleyLaup6poe0OSR/cLq3AoqMpjVkK/jBpcnmJR/kQVPvTJYKQ4D8iS0YEMfBwIvdf9eCA6tYk9anOI/MUFXgNpdXnO4sNSfkda3xx+IbErtr+0g1dnszVchZEAkRxxDTFLgBiqyDHnMMhMmkgFaFj25a5ePmUIxdFJiM8xMWJhi+LqVD4ArhdmYV4I3sRCo2XZG1MK8DDMr7Qoz4mM36D06DRom0oeuC3oLed0y/GX6w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3unNIQVHg781UyKUzBZ2pWEwaYzEdvBwMuHDTHI/FMA=; b=P/v03QNtCr4uYBH6Td30Nm8uk20PZjhK5Sxo9scJNKdDf55Oxs2o83pYCn9NCPAJ+kNYU4T6jauC4QlSMEIVhUGhO9cY6dMqUGsOG9CxBhgaY/rUICSle+aFUVA+D/zx4gVjPBhW1JmqEOWA6ICICbzHw4fg15VHEuFpEU+pwKc= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR0501MB3897.namprd05.prod.outlook.com (2603:10b6:301:7b::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.5; Wed, 13 Jan 2021 17:07:54 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3763.009; Wed, 13 Jan 2021 17:07:53 +0000 From: Jacob Champion To: "daniel@yesql.se" , "andres@anarazel.de" CC: "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIB6Y8sA Date: Wed, 13 Jan 2021 17:07:53 +0000 Message-ID: <7d6a23a7e30540b486abc823f7ced7a93e1da1e8.camel@vmware.com> References: <20200904012334.GF19499@paquier.xyz> <20200917074134.GX2873@paquier.xyz> <20200929055939.GF7117@paquier.xyz> <411593A7-E037-474D-BFD7-D3D6683C1D46@yesql.se> <20201020191529.5yverw3ybaube3pg@alap3.anarazel.de> <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> In-Reply-To: <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b02226ba-6e66-43a0-8d68-08d8b7e5c423 x-ms-traffictypediagnostic: MWHPR0501MB3897: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: aTQjHQLsbQoewVLeC+gDpB8ov4prL1BGvLv6fR9ooZfhFeerDn3D9RqMGnRy/ovVJ6f5u062UFQvTNPEeCsBhU9x7KD5++maLIx+3TsdbgWHHyHci5BquycP1pn4sp034CxdXiD/GYVNBLR0PRvtknoOlmBFQ6sLX5lE2A7sh503V9KWdw5VTdIMH/Sk2xPx+oJSGhfgIuz1V/g7G7Nv5ShRvGFkeEsiTxLnjuSyyetPA6RMiFgsrHlLhY/hxWB/lyInWpszrWLJk3w3qFRGk5DygwLqY0dDpcIsUwGc6ZO/hpke6pi9mSwBwyz+y2i4wpISRvCv//wDpfqmlpx7Eu9cdMHUuCOYuOVrmrhmX9sK9JgM+kVsuaMlF6pWOWIDjhcrZ6lDC1nQBUNXoKOlwA== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(136003)(346002)(396003)(39860400002)(366004)(376002)(64756008)(2906002)(4326008)(6506007)(66446008)(110136005)(66476007)(316002)(36756003)(6512007)(5660300002)(53546011)(66556008)(54906003)(8936002)(186003)(71200400001)(76116006)(4001150100001)(2616005)(6486002)(8676002)(66946007)(26005)(478600001)(86362001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?S3BBdks0OVBoZFFRVVFYdTYxVXNZSzRsZ3BsQzR4TWVyWHVpd0lCSHBTaXVR?= =?utf-8?B?WVNYQnB3aVBad2svUzRhd1JlTTVFeElBblhzWnRENUMrb2dNOXFkRGZ5TnMx?= =?utf-8?B?bFlqMGtoNjBFUWUwMEd4Q2dzL0R3dG1SK0g5emNTYTlmcEwvOEQvMy9Eei9o?= =?utf-8?B?M0RIZ1BjN00zR245cHowNUlWWVc3Sjhrc2U0Y3JGR0d6VEQvMUJ0UkI2cmU2?= =?utf-8?B?TS9JQ1QrVmhwVHF5bkdPQnBJUGg0dzBjRk1ySktjajRFOW5CMEpKR1Y3N0xL?= =?utf-8?B?UzluZG00SkVSQ0NmZUVPV1lZdVJEVnlZOGh1YmFOdU54dmVNb1FIcEpnSXU2?= =?utf-8?B?eS9RMmliNUpCb202ZkdZUTJ4azZVMGdrWit6VURCeTJuanhGTjh1dkFvcno0?= =?utf-8?B?dDc1L0l0OHVHdGduNmVieDREY1lSWURzZnJtU0Y5M2pGWm9qMXBaSUJrcUxS?= =?utf-8?B?MmlPNVNMM2xLZW5Cb2JPSS9mYzBhTUhES2hYVTUvdjdZR012QlN0aGlRUXlo?= =?utf-8?B?Q0dPNkNzcU9US1FNQkZJUEpGT05XWVN4T1VNNzhlVXdRdEJMRk52aU9ObnRK?= =?utf-8?B?VUptVWQwZkNMb2hXcUV3RFgzZ1RkY2dWMDJXTTFydXQ4NjJwQUh1YjVobG5j?= =?utf-8?B?VjBPK254U2FGZVFwRmU1cDkwYlVGaGlSbFIwMXV1K0tjakwxcDcrVFQrUWpV?= =?utf-8?B?N29vb3Judk1OTWxJOXY4ZHU4L1lXaksvK3VvVEI1Q2cxRjg3eUdxRXV4UFVO?= =?utf-8?B?bmllR1R0WUp0YVRESTcxQzZzRFYwTmEyK2tuNlArSmIzMkdLZDhYb3hTUGdM?= =?utf-8?B?RHFuL0VNdFRqTnpoRnN5WU9TRDhEbGtZUU9iMVhlcUEwR1p0M1doMkFGbFZ5?= =?utf-8?B?bVJzWVIwTDF4cHJ0NFRpNXpWZFJWUWliMUdSK2x5cE81QU5Nc1phR1JsRzN3?= =?utf-8?B?bUE3Wm9kanowZXhXWEpPVkZwdDlRRXZYNys2TzdBb1ozcXJWOHkrQ0NVYmVS?= =?utf-8?B?bEN0RGY3bTRBYUxhSTMvUTBDUERuZGFoUHFJQXpZcUxyRkVnNWtZQ0VFbStT?= =?utf-8?B?UkZUUXNIdkdZMVp0SmVCK2w5ODUvbi9hekVyRGduVDVvVTlSZktrUkV4MllX?= =?utf-8?B?d1ptMDBlTmx1QlltWWduVDFmTWFkVE1UOC9ka1VWZHh3Q3FyeXdtWUJVYkJ3?= =?utf-8?B?MVcycEE3WGxWK092Ulc1RGU1OWk3NEZOU29OR3lxQUFoYmpZNGhDUE9CMDJH?= =?utf-8?B?YXJlTWlJdjNvOFlOUnFzRTlRRWk4VkVuUWJ1aERrclJXVldzdjRlaDNiNDlX?= =?utf-8?Q?6JdgismzIHSB57wfwTsjTvGDhz57EpELBB?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: b02226ba-6e66-43a0-8d68-08d8b7e5c423 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2021 17:07:53.5244 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Uv/MOkLv3BtVDiDXBRc8Tj1lFrg5h3yDQMcQ5W68osMaV2LtPpRK15BGhi7TflroGlOg6bi/k9fRbjQVzHIPdw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR0501MB3897 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gVHVlLCAyMDIwLTEwLTI3IGF0IDIxOjA3ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAyMCBPY3QgMjAyMCwgYXQgMjE6MTUsIEFuZHJlcyBGcmV1bmQgPGFuZHJlc0Bh bmFyYXplbC5kZT4gd3JvdGU6DQo+ID4gDQo+ID4gPiArc3RhdGljIFNFQ1N0YXR1cw0KPiA+ID4g K3BnX2NlcnRfYXV0aF9oYW5kbGVyKHZvaWQgKmFyZywgUFJGaWxlRGVzYyAqIGZkLCBQUkJvb2wg Y2hlY2tzaWcsIFBSQm9vbCBpc1NlcnZlcikNCj4gPiA+ICt7DQo+ID4gPiArCVNFQ1N0YXR1cwlz dGF0dXM7DQo+ID4gPiArCVBvcnQJICAgKnBvcnQgPSAoUG9ydCAqKSBhcmc7DQo+ID4gPiArCUNF UlRDZXJ0aWZpY2F0ZSAqY2VydDsNCj4gPiA+ICsJY2hhcgkgICAqcGVlcl9jbjsNCj4gPiA+ICsJ aW50CQkJbGVuOw0KPiA+ID4gKw0KPiA+ID4gKwlzdGF0dXMgPSBTU0xfQXV0aENlcnRpZmljYXRl KENFUlRfR2V0RGVmYXVsdENlcnREQigpLCBwb3J0LT5wcl9mZCwgY2hlY2tzaWcsIFBSX1RSVUUp Ow0KPiA+ID4gKwlpZiAoc3RhdHVzID09IFNFQ1N1Y2Nlc3MpDQo+ID4gPiArCXsNCj4gPiA+ICsJ CWNlcnQgPSBTU0xfUGVlckNlcnRpZmljYXRlKHBvcnQtPnByX2ZkKTsNCj4gPiA+ICsJCWxlbiA9 IHN0cmxlbihjZXJ0LT5zdWJqZWN0TmFtZSk7DQo+ID4gPiArCQlwZWVyX2NuID0gTWVtb3J5Q29u dGV4dEFsbG9jWmVybyhUb3BNZW1vcnlDb250ZXh0LCBsZW4gKyAxKTsNCj4gPiA+ICsJCWlmIChz dHJuY21wKGNlcnQtPnN1YmplY3ROYW1lLCAiQ049IiwgMykgPT0gMCkNCj4gPiA+ICsJCQlzdHJs Y3B5KHBlZXJfY24sIGNlcnQtPnN1YmplY3ROYW1lICsgc3RybGVuKCJDTj0iKSwgbGVuICsgMSk7 DQo+ID4gPiArCQllbHNlDQo+ID4gPiArCQkJc3RybGNweShwZWVyX2NuLCBjZXJ0LT5zdWJqZWN0 TmFtZSwgbGVuICsgMSk7DQo+ID4gPiArCQlDRVJUX0Rlc3Ryb3lDZXJ0aWZpY2F0ZShjZXJ0KTsN Cj4gPiA+ICsNCj4gPiA+ICsJCXBvcnQtPnBlZXJfY24gPSBwZWVyX2NuOw0KPiA+ID4gKwkJcG9y dC0+cGVlcl9jZXJ0X3ZhbGlkID0gdHJ1ZTsNCj4gPiANCj4gPiBIbS4gV2UgZWl0aGVyIHNob3Vs ZCBoYXZlIHNvbWV0aGluZyBzaW1pbGFyIHRvDQo+ID4gDQo+ID4gCQkJLyoNCj4gPiAJCQkgKiBS ZWplY3QgZW1iZWRkZWQgTlVMTHMgaW4gY2VydGlmaWNhdGUgY29tbW9uIG5hbWUgdG8gcHJldmVu dA0KPiA+IAkJCSAqIGF0dGFja3MgbGlrZSBDVkUtMjAwOS00MDM0Lg0KPiA+IAkJCSAqLw0KPiA+ IAkJCWlmIChsZW4gIT0gc3RybGVuKHBlZXJfY24pKQ0KPiA+IAkJCXsNCj4gPiAJCQkJZXJlcG9y dChDT01NRVJST1IsDQo+ID4gCQkJCQkJKGVycmNvZGUoRVJSQ09ERV9QUk9UT0NPTF9WSU9MQVRJ T04pLA0KPiA+IAkJCQkJCSBlcnJtc2coIlNTTCBjZXJ0aWZpY2F0ZSdzIGNvbW1vbiBuYW1lIGNv bnRhaW5zIGVtYmVkZGVkIG51bGwiKSkpOw0KPiA+IAkJCQlwZnJlZShwZWVyX2NuKTsNCj4gPiAJ CQkJcmV0dXJuIC0xOw0KPiA+IAkJCX0NCj4gPiBoZXJlLCBvciBhIGNvbW1lbnQgZXhwbGFpbmlu ZyB3aHkgbm90Lg0KPiANCj4gV2Ugc2hvdWxkLCBidXQgaXQncyBwcm92aW5nIHJhdGhlciBkaWZm aWN1bHQgYXMgdGhlcmUgaXMgbm8gZXF1aXZhbGVudCBBUEkgY2FsbA0KPiB0byBnZXQgdGhlIHN0 cmluZyBhcyB3ZWxsIGFzIHRoZSBleHBlY3RlZCBsZW5ndGggb2YgaXQuDQoNCkknbSBnb2luZyB0 byB0cnkgdG8gdGFja2xlIHRoaXMgcGFydCBuZXh0LiBJdCBsb29rcyBsaWtlIE5TUyB1c2VzIFJG Qw0KNDUxNCAob3Igc29tZXRoaW5nIGxpa2UgaXQpIGJhY2tzbGFzaC1xdW90aW5nLCB3aGljaCB0 aGlzIGNvZGUgZWl0aGVyDQpuZWVkcyB0byB1bmRvIG9yIGJ5cGFzcyBiZWZvcmUgcGVyZm9ybWlu ZyBhIGNvbXBhcmlzb24uDQoNCi0tSmFjb2INCg==