Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP7VH-0004Rf-SR for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 17:41:12 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lP7VG-0004WS-QG for pgsql-hackers@arkaria.postgresql.org; Wed, 24 Mar 2021 17:41:10 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP7VG-0004WL-CD for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 17:41:10 +0000 Received: from mail-bn8nam12on2078.outbound.protection.outlook.com ([40.107.237.78] helo=NAM12-BN8-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lP7VB-0003Zh-Kl for pgsql-hackers@lists.postgresql.org; Wed, 24 Mar 2021 17:41:09 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QIDIf40mKt9rZKgkmEd3KHM3rmZ80DnDk9IA4nbanOLueMhITfK6jgY2ageD3D6DnIXSsHdv5HlRNT4JsKsLN3HYpczGxXojiixovgFGkNlN47CtRfVEgIetYS4GfEBzPLtbKqqi/QRzAyVy4ZcECS7R5zpvqmMHIyGdhKkUUAYazNkzJziBs0V6uoINx1uEH6uBR0yAnAwY2m9wIyhDPmvfS23BeHM3l/5tdMdfNoryZYxlQp8Gu6UjQluRCNx901h+WnUMcbYkuFakCPiS32501nynuZn71GQCCYk4GlhqzUOedjel9dJGSbbhJ0y+GyG40Zvm/kCcXOIoHh+Pkw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=683BiLx2akZrbc1TlQDkHx4WgZ5QZPDTF+xSSgXgqAo=; b=IOl/PqwJza+U/vNNRpHdiCLIdRhy/SLAlZHr7nrw6JvzbU31j5goHg2V5LO3kvopnlHuMMBZUSE7EpFCimH80S0CwClJGJCnbu+VA40+7pwin7OTwQp3wf6kfxwPmRRvv/ajzyE2HuxDII8/KG/81rtml/cb33D0p7Sc9ovdWCZcDYI4urPWT4do7FxQ0yl3QZdv0RAK1WmlS9ZOdXwQGlL6T4CiXKU/oEra7I4ns5cEtWF5KnQIYYDtRM73YoJh/GJK9j1JtVDK31JY0VnBhRAdb8KBQuB3Q8CJB9apr+o1LHqxc31AolhNnT/wZ+iRTQOZbMY9e6yXB0hInLAXOw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=683BiLx2akZrbc1TlQDkHx4WgZ5QZPDTF+xSSgXgqAo=; b=RQyc7POsj3n/+yYura79/ZwABE2WZMeUFT9kFe2qO6p5W+lPTAzn8JyqczCfNE59TlY9B4KUN/T1OO9lHFaHXHmFu/DattJMDEF5RA4iOK/9BkNNdCHmIFjts0bGLtPUTISR3qpond7DA7qshqDkHvFkzEE0Z1D40KDQObaYi9Q= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR05MB3471.namprd05.prod.outlook.com (2603:10b6:301:41::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3977.9; Wed, 24 Mar 2021 17:41:02 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244%8]) with mapi id 15.20.3977.024; Wed, 24 Mar 2021 17:41:02 +0000 From: Jacob Champion To: "sfrost@snowman.net" CC: "daniel@yesql.se" , "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEAgAXTZYCAAkVWAIAAzGsAgArFR4CAHUTDgIABj0AAgAGZzQCAAAZRAIABAusAgAASXQCAAAtLgA== Date: Wed, 24 Mar 2021 17:41:01 +0000 Message-ID: <8f741a425fd135ca38a28063730715499f7f6445.camel@vmware.com> References: <686dd2b189ec04b161f71481f1f726255ee8224f.camel@vmware.com> <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> <20210324170036.GS20766@tamriel.snowman.net> In-Reply-To: <20210324170036.GS20766@tamriel.snowman.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: snowman.net; dkim=none (message not signed) header.d=none;snowman.net; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d3e61488-a29f-4d83-465f-08d8eeebfe1d x-ms-traffictypediagnostic: MWHPR05MB3471: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(66946007)(66556008)(6486002)(64756008)(66476007)(66446008)(5660300002)(4326008)(6916009)(76116006)(2616005)(36756003)(2906002)(6506007)(26005)(86362001)(38100700001)(186003)(8936002)(8676002)(478600001)(316002)(54906003)(966005)(6512007)(71200400001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?cmJWMFdEbFh4VVdiZzdSSFdDaVc4N2swVjNzeEp3TlozZWUyZytzREhDWGlT?= =?utf-8?B?VnZHNXd1VE1TWGROMFA3a2dQSjNyamJTVVIwNExmUWJKdGtxcWhBREEyeXZI?= =?utf-8?B?dTJZNitUYmJEQjlVd2grd2JmNU1TU21iRXBSZ1o3RzdZZVhnbWhLN0wrYllK?= =?utf-8?B?Y3pTeC9wejRxZmRwUk55Q1RhUlR0WnpRQTBZTmU0K2dxMmdiSEpobVBtM0pV?= =?utf-8?B?WldGTVlPbmljUWN4MUlGMjVOaENsM2hmWCsvbGVqS1lVblBqY3J6c29TRk1B?= =?utf-8?B?U0VDMlEwZDVoOWdFbk9BM29RYy9VeTdDeWhPV0hFLzZESnlKbksvc0RqYm5P?= =?utf-8?B?QnJYV29kNVVKZEE1RGVKV0tlM3VkMmFvM3dvSG5tUUVJS1lEeWwxWUlKaUNu?= =?utf-8?B?K2ZOODY3TjlmSDQxMFgycUV6c1NSZGRLZGlScnBqekhCL3RCODhha3lSa2ps?= =?utf-8?B?NXljS21nckdjcHFja3Q5cm9pRGdzK0hjNWFnY0FzYzI3aVNaRVB1ZFJKYzhM?= =?utf-8?B?YVE5cHI4cGxFWE40K1RwWEgzQnRIenRaYUg0U0YxWk50LzlKN09NbEJZVUQ2?= =?utf-8?B?WUFzaVJzeFdqSkF5cnNWcmRwY1l0dkdjNkxRK3M3bFVNc3RVNjFTMUFDZ2lx?= =?utf-8?B?bmRjZUxxOVpwS1hYQ3cxYmRmTUxlMkdDZXpPejJzeDlDdmxUYUw1THFqQmd4?= =?utf-8?B?emp4ZUh3aERma2NDUngwWjJTK0MzczExbE5DbkRsRWxjR1hjaEpxQ0JJT2hu?= =?utf-8?B?TDFnNzB3dEhvenJaOHlWZVZGenhOb290cXM4Y3REZ0F1Z3BJOTZPMmluQWdJ?= =?utf-8?B?cVV2NldvK3NaU0lKSURYZ29GV3Q1UHNkRkVNUDBHeEhKaFNJc3NINFl5eEl0?= =?utf-8?B?TW5QdDh2NG44a3ZRSy93bW5FRzF3V05tWS9tMjM1akFFYWpOeFEwUmU2WEx5?= =?utf-8?B?b1NjK2I1b0Q2Z29tNHJHZldDQmJPMWQ3eXZvRzdDQmc1R3lvWXYwMTRuNFcr?= =?utf-8?B?MTQrNkYwOXJ0QkdUWDhVaWRlVWgwZXdhaWlqak8zZmNwclMySjJZQStTU2hV?= =?utf-8?B?OFBCaTZuUzdxYkY3c3l5L3JvUjRhTmVlSks3cGU1TFJEK1NvekFwVnV3NHM2?= =?utf-8?B?NVhqMWxaYnRMQ0FvUkZhditmYU1rZzNEcVhzZVJmYmdIOThydVp2QVAybm4v?= =?utf-8?B?M0wxbXpqUnZTU0tKcUh2YW4wUE5IT0tWWkFvTkF3UDJQV1JYUjNlTllUM3hi?= =?utf-8?B?aUIxeHQ0UkxVMUptZGdqUjhGZERkM2NmTkNHSTZuYzlsVFJMQTRJN1FrUVdo?= =?utf-8?B?NjFsaTJZWHV6elEyK0I2bDZRdlZ1ZXEzZjFMRFU3UHVFcU9pU2x0ZmxBMEc1?= =?utf-8?B?Yi9RYnVYMkRPRTA3OTl3YkR5bUUweEFudE9odzNocldURDRnUEVKN3U0dGhR?= =?utf-8?B?MmJYZk5iMmh0Qy9SNHE2Um1Qb2hOYVlBcFpLcFJkV1VVM2tITEx5aDh4NE1C?= =?utf-8?B?K3ZWaTlzQ2F5UmdMUHdLdE9jS2l2a0kyY1VIK0dVZ0U0ZVZ5QzloOWduOTRO?= =?utf-8?B?RWxUY3gvR0hsTURkY0xONS9EQTk2WUhXakVpeVF0UWtzQVNmcHpCT0p0SG5I?= =?utf-8?B?aWFSQ2ZDZGZhK1p2V0NDQlp2RmgvaGVkbzR4VjJwWGlpQnBIQUZ1WXNFYlUy?= =?utf-8?B?UGVDVjAyY0dOeHI0dWVzRzBGdXVoTVN2dGdLR2dwWThHU0EwNGkweDI0ck5m?= =?utf-8?Q?07GgL/hcCsBtAjmUfleUrSkDRghJA0esBJvnCBd?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <1B9AD86E5A9C8F4E9DF4410614E9B981@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d3e61488-a29f-4d83-465f-08d8eeebfe1d X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Mar 2021 17:41:02.0172 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Nq97lne/6yv6DXAWyc8vUwhsGA+JasGrFHaPVZtL+ELAlQzcVuIrVMxOIv0JTToEtrV/f2MjAiCLIpZ1kapAnQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3471 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gV2VkLCAyMDIxLTAzLTI0IGF0IDEzOjAwIC0wNDAwLCBTdGVwaGVuIEZyb3N0IHdyb3RlOg0K PiAqIEphY29iIENoYW1waW9uIChwY2hhbXBpb25Adm13YXJlLmNvbSkgd3JvdGU6DQo+ID4gUmln aHQsIGJ1dCB0byBjbGFyaWZ5IC0tIEkgd2FzIGFza2luZyBpZiAqTlNTKiBzdXBwb3J0cyBsb2Fk aW5nIGFuZA0KPiA+IHVzaW5nIHNlcGFyYXRlIGNlcnRpZmljYXRlIGRhdGFiYXNlcyBhcyBwYXJ0 IG9mIGl0cyBBUEkuIEl0IHNlZW1zIGxpa2UNCj4gPiB0aGUgaW50ZXJuYWxzIG1ha2UgaXQgcG9z c2libGUsIGJ1dCBJIGRvbid0IHNlZSB0aGUgcHVibGljIGludGVyZmFjZXMNCj4gPiB0byBhY3R1 YWxseSB1c2UgdGhvc2UgaW50ZXJuYWxzLg0KPiANCj4gWWVzLCB0aGlzIGlzIGRvbmUgdXNpbmcg U0VDTU9EX09wZW5Vc2VyREIsIHNlZToNCj4gDQo+IGh0dHBzOi8vZGV2ZWxvcGVyLm1vemlsbGEu b3JnL2VuLVVTL2RvY3MvTW96aWxsYS9Qcm9qZWN0cy9OU1MvUEtDUzExX0Z1bmN0aW9ucyNTRUNN T0RfT3BlblVzZXJEQg0KDQpBaCwgSSBoYWQgYXNzdW1lZCB0aGF0IHRoZSBEQi1zcGVjaWZpYyBJ bml0Q29udGV4dCB3YXMgdXNpbmcgdGhpcw0KYmVoaW5kIHRoZSBzY2VuZXM7IGFwcGFyZW50bHkg bm90LiBJIHdpbGwgZ2l2ZSB0aGF0IGEgdHJ5LCB0aGFua3MhDQoNCj4gYWxzbyB0aGVyZSdzIGlu Zm8gaGVyZToNCj4gDQo+IGh0dHBzOi8vZ3JvdXBzLmdvb2dsZS5jb20vZy9tb3ppbGxhLmRldi50 ZWNoLmNyeXB0by9jL1h6NkVtZmN1ZTBFDQo+IA0KPiBXZSBzaG91bGQgZG9jdW1lbnQgdGhhdCwg YXMgbWVudGlvbmVkIGluIHRoZSBsaW5rIGFib3ZlLCB0aGUgTlNTIGZpbmQNCj4gZnVuY3Rpb25z IHdpbGwgZmluZCBjZXJ0cyBpbiBhbGwgdGhlIG9wZW5lZCBkYXRhYmFzZXMuICBBcyB0aGlzIHdv dWxkDQo+IGFsbCBiZSB1bmRlciBvbmUgYXBwbGljYXRpb24gd2hpY2ggaXMgbGlua2VkIGFnYWlu c3QgbGlicHEgYW5kIHBhc3NpbmcNCj4gaW4gZGlmZmVyZW50IHZhbHVlcyBmb3Igc3NsX2RhdGFi YXNlIGZvciBkaWZmZXJlbnQgY29ubmVjdGlvbnMsIHRoaXMNCj4gZG9lc24ndCBzZWVtIGxpa2Ug aXQncyByZWFsbHkgdGhhdCBtdWNoIG9mIGFuIGlzc3VlLg0KDQpJIGNvdWxkIHNlZSB0aGlzIGJl aW5nIGEgcHJvYmxlbSBpZiB0d28gY2xpZW50IGNlcnRpZmljYXRlIG5pY2tuYW1lcw0KY29sbGlk ZSBhY3Jvc3MgbXVsdGlwbGUgaW4tdXNlIGRhdGFiYXNlcywgbWF5YmU/DQoNCi0tSmFjb2INCg==