Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mVyYF-00066C-QG for pgsql-hackers@arkaria.postgresql.org; Thu, 30 Sep 2021 16:04:52 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mVyYB-000881-Ke for pgsql-hackers@arkaria.postgresql.org; Thu, 30 Sep 2021 16:04:47 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mVyYB-00087t-0y for pgsql-hackers@lists.postgresql.org; Thu, 30 Sep 2021 16:04:47 +0000 Received: from mail-co1nam11on20618.outbound.protection.outlook.com ([2a01:111:f400:7eab::618] helo=NAM11-CO1-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mVyY7-0006QF-Kz for pgsql-hackers@lists.postgresql.org; Thu, 30 Sep 2021 16:04:45 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aayOdwS9w88TwZR8EA4At7KdtxHUtk5QbjUXig7IJd+GMMyD9+h6gZcciD2OM/gGObF2utVA6u+2sD7DDL/x0Dqu72bwVBiTwyaIn5cKDsX2Tyx7eN/EpVYY2OfvjFrDDuTfg7OoJ6JWOHsJI2kBxSE0ghdL9AXXgkBun7uQU5JVzWoTftO1yc1E/AWX4bxscGck2uOsX13VO5vq5siD0j9KQQoDo1Qkdk9qEZJaKyaCp0Y3z4swKZC9E+1GZT57WQ9/8wcn/CCkWyTikYdjd+S95cbJJt15qfIVbf7B5LYV0COreDveKl24XRa+huw7N6BOfr8tdtGM4X6GwP2LUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=dlCorhUvWRvO+xnfBx0YSF2bXv7fYwcRqW/DgCqPnso=; b=cA9jiDLxnW/tZmIUUYw9JZpOvq+WpgpzOuQcc7bc9AgwWCqYWGb5sdWnNgX3JnW+AhrFwJsS71t/SAP9ncdUKXnavYy74pfkNbPVbxHMTyu35h8PCQ49kBtPOBz/6WIJT5QLfgnslcG0/xUik2F3xDEaK9Q06bxQH61I0f0kqwBMMUd4eHw3eyV5pzyxac1Q2Ez9agdjLIPJ6AKQ1ea11lco7ehIRXL8ZcpHsa/K6Ulb+nwFNQgxUCGFDnIJCF5m1ACTcxPnzWW2WONH/022OCR9yWbUPyJrJdh86aQOchofUAHXH0ysYnnS4t4F5d0QgMXh4OHl0s35zNeQ4kubBg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dlCorhUvWRvO+xnfBx0YSF2bXv7fYwcRqW/DgCqPnso=; b=RqXMH7MU2zmFkponUV3PWHIO6elO0/H0D7qgQDABM99cfiH6Y0reIeHBDIFbmK9csnBI8P23AsMWiEmSeNdNRzfxCaQmz+3t9T2DmqSvON4d56ylpyHXe+VzIZMmY9aY+sJlAWq8YElUh/iGGOvVTM6/Qet6z8CLsbr3MAleEZM= Received: from DM5PR05MB2892.namprd05.prod.outlook.com (2603:10b6:3:54::9) by DM5PR05MB3225.namprd05.prod.outlook.com (2603:10b6:3:d1::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4566.7; Thu, 30 Sep 2021 16:04:40 +0000 Received: from DM5PR05MB2892.namprd05.prod.outlook.com ([fe80::55fc:6af8:c31c:aa]) by DM5PR05MB2892.namprd05.prod.outlook.com ([fe80::55fc:6af8:c31c:aa%10]) with mapi id 15.20.4566.015; Thu, 30 Sep 2021 16:04:40 +0000 From: Jacob Champion To: "daniel@yesql.se" , "rachelmheaton@gmail.com" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "sfrost@snowman.net" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: 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 Date: Thu, 30 Sep 2021 16:04:39 +0000 Message-ID: References: <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> <33A9AFD6-7285-4064-9806-B08D7E61A88C@yesql.se> <93011BD4-4CC5-419B-9D5D-526274824831@yesql.se> <2A20EED9-2D5E-4779-B201-B7458DFC3FE2@yesql.se> <09DB934A-2B4B-4F1E-9DAA-C55D50F254D1@yesql.se> In-Reply-To: <09DB934A-2B4B-4F1E-9DAA-C55D50F254D1@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9d29081e-1d82-4040-1879-08d9842c023e x-ms-traffictypediagnostic: DM5PR05MB3225: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 3arwi66qfAMIyVbFQxEylT7LaaEh8nsfh5rGJr1X3+Yp8cUeXBp1fcUto8Rb4NjC9kv1c4+920RLOTIzjEOFAoKm/cfPQksWOlu4DNUjJKofDZHHrpc5smSDFnQYhf64m3mZ6vLQ1jp/2rUbBG4cxNnOxY+XY+n7y1T6E+HFJ3VJI/2bJ/pbKuM5Nhk+k3RWvO0p0Xsl3BP1bkzcgbCyUcyZn8ybMG+G7bQkeQm6dmFTB4A3/nxSF4Sp1DCIgilshssV+fkEgK7iOad/DQTgr5VFwD/eziguLy1g+/5IUcqsqxn3HLwgfzf1WrMB4otIU0+Rupus3U/DXnAUoqumLdGRZnlPFif5tordqXD6pDcZPGLhfbaLH+Bovci+dl5opUpldujN4hsooM4v2zr9DlciqDgCDQg/DplGvztQlq/WHjM74tOAD31rob1wNMmfzJEfdpa+Dm043pclggRnnwBh3WVxFjToVpEfCZ2lyugQHw+ZWfgpz+w25+ohz3d5Oo4uEcba2uCRDPB5kUYJmmx5KW6U7otl9zrmd53PlRuwCZBBjtL2pJE4/Gal69GjWM2gKnb6VS/CjOxW+CxRqsig3rJvJ1bA9z3m5WdD4rK0MqboodR73tsxeS43Rb/33dL/QppyDJEbXB0nOqz+TbawUcqjwLLCc+WrRnn30NOrt4HmbdCPdZkclnbY1JJR7ouVn9zOT1/XgLa5m45TPQ== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM5PR05MB2892.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(6512007)(4326008)(8676002)(54906003)(110136005)(26005)(5660300002)(6486002)(38070700005)(186003)(2906002)(76116006)(6506007)(91956017)(508600001)(66556008)(8936002)(316002)(64756008)(4744005)(83380400001)(66946007)(86362001)(71200400001)(38100700002)(122000001)(66446008)(36756003)(66476007)(2616005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?M010dmNRbGUyTldOSWxkS3VHWjd1Z2p5bFFlOXd0YktKS2JLcmVVTCtXNkMx?= =?utf-8?B?Sk03dXF0bUN0MWhGc2U5Y3N1RDlYdlQreXVxakxyRlVrV05UYk1KT0dNbXg0?= =?utf-8?B?NXNxMWdzZGxSeXhkSUVnS0NRdnRFYkV0QnZkRkwvbkpFajlkcHFKTkw3dmow?= =?utf-8?B?M3lONWZLY204a3VIbUs0Wk43Qys0WGd5WXFLY3pzbi9ROUNFT2dhSjBSbGxk?= =?utf-8?B?OVFxUjk1bGxkb2xaa3VkSzl1akRGMGNOMVhVUWYzQ1NBTzdZN0g2UTVWT2hu?= =?utf-8?B?VmNjRnI0RWlMYVRPQUtSckEwWE9GTHJpZmxoYlpzekFNSk5UUUFEZTNVSndo?= =?utf-8?B?ZVNGRmJobmFOSGUwZlUwVlRuTkJ0bXlHY1hjNG9rYlp2d1NOUUhKbDVrSnhJ?= =?utf-8?B?aGZVMHd3OE9QUHFkamxReUtDWEM0K29qcHBsQ21Ndk9PTjZjNjZ0dWlnYzF3?= =?utf-8?B?UGpDYWdFaE91WDFlNjl3QXh4Q0ZzazY0YnBRNTVhMU5QNEZsandXVjVERDJ2?= =?utf-8?B?UkdPaDZLTUg3NVBsSS9QR2lqOXJUbDdsTmM4SDl3eDRHSUFucWE1UDBpVlNG?= =?utf-8?B?Ti9vSjF1U0FmT20yT3BGWWNsMDd6MUJ5NERHN01xSEVDUmFaQlNSVGRCWDNN?= =?utf-8?B?am0wcTFULzFuTlQ2ZzBXSWZiYTA4Mk1ZOEN0R0J5ZE83eERrTW1zc2J1RXps?= =?utf-8?B?cUdTOUV6bGJHeUpsUU1ZNC9wRnhOV1N0d0FUVFUxdzh4MUw4SndURWdGNmJy?= =?utf-8?B?Nk5vSGljR0s4VFdaNzk1aU4zRnNzQktMR1RpSEJZVzZ3UGlFbGI0aWhRZW9P?= =?utf-8?B?QmwraXNsT1BRdXBmQTRoMkovWGEwS1JnRktJY1NxMjVFSWpxdDJkclNvOW9l?= =?utf-8?B?VVppeTV6a0w5NFVTQ0cxWHRvTW1iTnBIVFRnaDJlcEtwVXpldEZoSzJ4eDV3?= =?utf-8?B?QlMrMDNEeUE1MDUzNXluK29pMWUzWUxpWnpjT3k4TmxIQURwSmkzMDJPeUUv?= =?utf-8?B?WFhCaTErUTFSVmJoY3pXV05YekRudHlycExvRXlHSkYrZzFQZm5oTG5zTEp0?= =?utf-8?B?NHpSTlpxM1JkY25MUHZJWjMzWHhhbzFiNGhlOThNSnhEd3NRQnJMbmhWYWlZ?= =?utf-8?B?SjRHSDU0TU41MmE4Vi9jQ2NMM1dpQWl4Qlk1NnR1MlRmZ2xFRmlrR0l0ZE9z?= =?utf-8?B?UWk0RjRqMFA3OEY2REZIeUhCYStOdmRYZS9qS1kxc25kZFl6S3dldlJwdzRY?= =?utf-8?B?Vzd4eVhzd1cwa2ZoQm5yeFZuc210MVZsd2xHRjA5eXRKanEvMXBTUVUyeDZ1?= =?utf-8?B?YU1BOTJ3M3g1S0drR1pOY2pOVHNGRDZ1TEtvZGM3a3IyZDQwYy9IMDFLZUVo?= =?utf-8?B?Z1NOSm9VMHd5NnZZbGxHdFM4UlFqZStHNzBZNTBZd1BKcitLV0hSUGFyZGZm?= =?utf-8?B?MG9tUDdid294c3U5U2tGUlBYSE96eHRoMURnbStmdGx6YlczL3ZIZ1hWWVpL?= =?utf-8?B?ZE8weXk1VDlRR1dQQy9pQVd6eDNKWnRJS3BjdWxoeDB2QlQ0QXJkTVhHTFF2?= =?utf-8?B?TWhCSmVIamxGMzhCWFZCeGRpR3lGRVNjR3kwTnE1MHVha05kZElTdE1idlZF?= =?utf-8?B?L2tVR3VrbnNidjV3ZXVUcVRkNGhsb0tqTDVwYi9ocFVUSW9BUWZRUXU5N0ZM?= =?utf-8?B?UzlBdlFMbUNWb0ZxbWNuTlBoS3crSjhLZTQycGtvakJGZ09DZ3hncFJTQWps?= =?utf-8?Q?I3M3YBCHdyTqxY3/p17QbK5NGuGX/BBGobUr8TV?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM5PR05MB2892.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9d29081e-1d82-4040-1879-08d9842c023e X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Sep 2021 16:04:40.0007 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 1YXJLtQi5OJlhxmkUX9m27XJyDlyBFAtNXAYMy647MWhDzZgfKfbRwtEOp2wRrtRLMSVQ+GIfSNEkezxiRlyWA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR05MB3225 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gVGh1LCAyMDIxLTA5LTMwIGF0IDE0OjE3ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gVGhlIGxpYnBxIGxpYm5zcyBpbXBsZW1lbnRhdGlvbiBkb2Vzbid0IGNhbGwgZWl0aGVy IG9mIHRoZXNlLCBhbmQgbmVpdGhlciBkb2VzDQo+IGxpYm5zcy4NCg0KSSB0aG91Z2h0IHRoZSBy ZWZzIGNoZWNrIG9ubHkgc2VhcmNoZWQgZm9yIGRpcmVjdCBzeW1ib2wgZGVwZW5kZW5jaWVzOw0K aXMgdGhhdCBwaWVjZSBvZiBOU1BSIGJlaW5nIHN0YXRpY2FsbHkgaW5jbHVkZWQgc29tZWhvdz8N Cg0KPiBJJ20gbm90IGVudGlyZWx5IHN1cmUgd2hhdCB0byBkbyBoZXJlLCBpdCBjbGVhcmx5IHJl cXVpcmVzIGFuIGV4Y2VwdGlvbiBpbiB0aGUNCj4gTWFrZWZpbGUgY2hlY2sgb2Ygc29ydHMgaWYg d2UgZGVlbSB3ZSBjYW4gbGl2ZSB3aXRoIHRoaXMuDQo+IA0KPiBASmFjb2I6IGhvdyBkaWQgeW91 IGNvbmZpZ3VyZSB5b3VyIGNvcHkgb2YgTlNQUj8NCg0KSSB1c2UgdGhlIFVidW50dSAyMC4wNCBi dWlsdGluIChOU1BSIDQuMjUuMCksIGJ1dCBpdCBsb29rcyBsaWtlIHRoZQ0KcmVhc29uIEkgaGF2 ZW4ndCBiZWVuIHNlZWluZyB0aGlzIGlzIGJlY2F1c2UgSSd2ZSBhbHdheXMgdXNlZCAtLWVuYWJs ZS0NCmNvdmVyYWdlLiBJZiBJIHRha2UgdGhhdCBvdXQsIEkgc2VlIHRoZSBzYW1lIGV4aXQgY2hl Y2sgZmFpbHVyZS4NCg0KLS1KYWNvYg0K