Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lotjU-0002s0-Lb for pgsql-hackers@arkaria.postgresql.org; Thu, 03 Jun 2021 20:14:24 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lotjS-00080z-AB for pgsql-hackers@arkaria.postgresql.org; Thu, 03 Jun 2021 20:14:22 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lotjS-00080q-2B for pgsql-hackers@lists.postgresql.org; Thu, 03 Jun 2021 20:14:22 +0000 Received: from mail-pj1-x1033.google.com ([2607:f8b0:4864:20::1033]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1lotjP-0007Vl-Gh for pgsql-hackers@lists.postgresql.org; Thu, 03 Jun 2021 20:14:20 +0000 Received: by mail-pj1-x1033.google.com with SMTP id k7so4299012pjf.5 for ; Thu, 03 Jun 2021 13:14:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=j-davis-com.20150623.gappssmtp.com; s=20150623; h=message-id:subject:from:to:cc:date:in-reply-to:references :mime-version:content-transfer-encoding; bh=Ooh//B6apVMb5is10WdFLg/qRBFonYLBs95qX153KDc=; b=LIrCCntb2HsMuhE5EmiM8TsQebOA9t2m9PHjpM0GLoDppX8fFlUQ1G2OdlipbjnaW+ NQcD7L184Ja+Y11kfSBKK1xMVBRY19BxHk4ylD4XcQFKd1eS6LA4LGYz21+hElS712G9 CKSZjzh2HNsmpi94PbtgF1zZpV/JliiSlTLzNR0HwTEcYy7+PR+YFPh3vlwFYMORH043 h/YADX9kgh/q01FZWuLY4wzAqeAHCwu/1rXq3yjHrK4S5ix0KQC86rt7etiB461jJqWI YFt53MwuK3cts0zZDFxPl/pFEpnC2AixBL+zExNBapuEB+vZga7Y/zby2uL1iy0s+MOH mK/w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:subject:from:to:cc:date:in-reply-to :references:mime-version:content-transfer-encoding; bh=Ooh//B6apVMb5is10WdFLg/qRBFonYLBs95qX153KDc=; b=fGYeiMllb2BvsAxLkM0IS8ys6oXUETYeJaCfcmiTVkIkmKHp4BGGAlQ3WHcwV63rMt 4J/6eYHJw4qK9gwf1o67Nt0/CZ7RxEl9gc7GCukcCrh+2j2PS/PCJN2QDoRqSJfX+1Mr rTAr+RXLvRzh6kMYFNX7pQgFh3jeCeGy8YbDnnf6OD59R4KHVQiBSImsl5vydCZJPZFf QDN8F4t5IuGD3xSISNhcPPXwciP0XuV4NCtma7VQMLFAj12sKOrSYHRqLkC/9otR4zcZ jN2iwbafZ9KuPuuvqd5ZzygaD5K//LJwlflnVjCUSCULBZyPAF3+687li/zcN8dz0fiD hUqQ== X-Gm-Message-State: AOAM531i2NpHoLlsNFhvl8X53BnQ7g5QHbCzRZA4pIHbE0vbAc/vEWQx rU5UFukiOUuIq7ZKUywMslqJsg== X-Google-Smtp-Source: ABdhPJx1bvXs8FwsM1P3sQgyP7BnKY6iJiIxIl2D0txG3Xlpuqsk27xeUp77P4GzFMeWDdki9HIu6w== X-Received: by 2002:a17:902:b090:b029:101:88b1:1488 with SMTP id p16-20020a170902b090b029010188b11488mr852139plr.32.1622751257304; Thu, 03 Jun 2021 13:14:17 -0700 (PDT) Received: from jdavis.lan (c-73-231-146-4.hsd1.ca.comcast.net. [73.231.146.4]) by smtp.gmail.com with ESMTPSA id 18sm2908240pje.22.2021.06.03.13.14.16 (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Thu, 03 Jun 2021 13:14:16 -0700 (PDT) Message-ID: Subject: Re: Support for NSS as a libpq TLS backend From: Jeff Davis To: Andrew Dunstan , Daniel Gustafsson Cc: Andres Freund , Postgres hackers , Michael Paquier , Andrew Dunstan , Stephen Frost , Thomas Munro Date: Thu, 03 Jun 2021 13:14:15 -0700 In-Reply-To: <8228d950-5bee-d1e9-b0ad-577a854939fa@dunslane.net> References: <20200904012334.GF19499@paquier.xyz> <20200917074134.GX2873@paquier.xyz> <20200929055939.GF7117@paquier.xyz> <411593A7-E037-474D-BFD7-D3D6683C1D46@yesql.se> <20201020191529.5yverw3ybaube3pg@alap3.anarazel.de> <907FA7D1-9BD9-464B-A6EC-DEEB53438D36@yesql.se> <20201028063957.cvln377jgao33ssu@alap3.anarazel.de> <1538bd8894fc723d97d5c41b9d4bb8feb9db0d43.camel@j-davis.com> <8228d950-5bee-d1e9-b0ad-577a854939fa@dunslane.net> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.2 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, 2021-06-03 at 15:53 -0400, Andrew Dunstan wrote: > Yeah, but it's annoying to have to start every talk I give touching > this > subject with the slide that says "When we say SSL we really means > TLS". > Maybe release 15 would be a good time to rename user-visible option > names etc, with support for legacy names. Sounds good to me, though I haven't looked into how big of a diff that will be. Also, do we have precedent for GUC aliases? That might be a little weird. Regards, Jeff Davis