Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jvmFz-0007E2-AM for pgsql-hackers@arkaria.postgresql.org; Wed, 15 Jul 2020 18:35:51 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1jvmFv-00015O-RI for pgsql-hackers@arkaria.postgresql.org; Wed, 15 Jul 2020 18:35:47 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jvmFv-00015G-Fb for pgsql-hackers@lists.postgresql.org; Wed, 15 Jul 2020 18:35:47 +0000 Received: from mail-qk1-x741.google.com ([2607:f8b0:4864:20::741]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1jvmFr-0008GF-To for pgsql-hackers@lists.postgresql.org; Wed, 15 Jul 2020 18:35:46 +0000 Received: by mail-qk1-x741.google.com with SMTP id c30so2763675qka.10 for ; Wed, 15 Jul 2020 11:35:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=2ndquadrant-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:cc:references:autocrypt:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=cuZQjidKMamcn39EYRu5Tx7klATeXSwej3tPizIyAwY=; b=WzHE80edtWRqg7TyZH24IHwGjPwrkgVceN+iXXpOWD40UVlNhTvQzwA3BLZP32bPOQ HJoolMDbyRM9pk2W2KmAHzHN36iWvoYRHlfd38BFMbTs9v+kTTqzEd14zzC+TOyuPP6V k0o33ZuuNDfsulqpvK0OFTOHreAQnkD2AZk2uHFJNLEYoFv/2OudqteSgsGCQSWvsacq tFSym7msxdS+4J4qGRmTWSQPEHkc77GoCMpElZVNy3WObFZtu2agCF64fKU1znWnwWef OohQVmnwJ13DN83haJcbmxOoR/A3qhYG0uKFf9ZY9V1kywkYJ+WDfqVzp5DhA/jyi8ii bPYQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:cc:references:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding:content-language; bh=cuZQjidKMamcn39EYRu5Tx7klATeXSwej3tPizIyAwY=; b=CgBOvtdTeOvDcASPz3Rw0Fnsc61hKWtd7TvVeiIxroy6If+0YI5QhElwgzTlGCwRdf MtIbrVxNWV/NYM0XtfOBjlWSBGHFGkOcoGKTQ9dEfOdGFVPiUnyQcWbAqClFOW3DU5Yi 4+HwRhfVgRtnX9Dc26ieyYoFIEfK+pMmkb1lCLzJzi4BjTBpBJbdIrT3uPU7b7yQbO/X g8Vb0b3C11S6Bjxx383Blulepfh23+1t0ZarI4mPPyuSxBacfYJzNthVL7mN+zGQHvbX a0Fqf480biQIXh9A75rUO3M2xwvNKTRNaKtAoMEjuEh/IhlFpTaE3EQJUn1kvdhgzPHF 16Gg== X-Gm-Message-State: AOAM5309b6z13vHGDGnYMS1e98gzroSlsyR3G5YSHl2yRbTRZqBpdqe1 RfqaKpb8hsmlH5LlhCokG2xF X-Google-Smtp-Source: ABdhPJwTYfJI8bP2kxD4Mq1Be9c/HroPz2OkPzY3yt7n+56Ts2ZRHOhrpFsfwMQ1rvQ1N0yirCOzsQ== X-Received: by 2002:a37:a94f:: with SMTP id s76mr395430qke.297.1594838141932; Wed, 15 Jul 2020 11:35:41 -0700 (PDT) Received: from ?IPv6:2600:1700:722:4630::43? ([2600:1700:722:4630::43]) by smtp.gmail.com with ESMTPSA id a140sm3707776qkc.16.2020.07.15.11.35.40 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 15 Jul 2020 11:35:41 -0700 (PDT) From: Andrew Dunstan X-Google-Original-From: Andrew Dunstan Subject: Re: Support for NSS as a libpq TLS backend To: Daniel Gustafsson , Postgres hackers Cc: Stephen Frost References: Autocrypt: addr=andrew.dunstan@2ndQuadrant.com; prefer-encrypt=mutual; keydata= mQENBE7KWFkBCAClridxur2AIc7eW2AR7izbfp3EnNefie2HbLF0izW5Ik5UjX2HBXBx4syI gY6b0ugohXrr274+baoAlvSbq6cAoQuEVrk5IZFzt20b1Xkx65FwGSEj526yiKLocqkJceSq Xr9xcA5SGY+FZv441chh5SU92v4q6z+6LPpoHOh97ptAVXZYNTtU0LevyvD5lja0TzbvJm6C eFXitJfnm1pLEr0DGJCR/iUOl/N62Kh4855zZC7NHIjQHPOvV5Stz/l5ilDhvGVk+xkXFPys SjZoUr1rXhYLpiyi5sR0X9FHXT0KnGuz1F5ERO7ZTLSSQ6fJwPj6gOk9K+vvoKvoeql5ABEB AAG0L0FuZHJldyBEdW5zdGFuIDxhbmRyZXcuZHVuc3RhbkAybmRRdWFkcmFudC5jb20+iQFY BBMBAgBCAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgBYhBOQ+WEYd/Hy/RGkVpZn6f8tZ /DuBAhkBBQJd1pSYBQkSzqMsAAoJEJn6f8tZ/DuBJmEIAIVFBIC3qGqh+YTPVTkfowwxpHz0 tZSPjZ6GS/5y62kgoZrZOVXw+Rg2ceuMM3a+In/RRjTx4bembgYqRKgzXlDfiNBJeq5ioVuN H1faDKE2lm5a6QkRQ2JU6DKf60fqSJGP5LisCUr1V0wz6EnlO31ArrKtXCNB+yk0KDAS6o6I Ql4pkXpr+vq4iilwJmiJOqTBam0LmQE7ulYCCYU8Z6MkpiSl+dO7QSramcGyxauQRI3a7gcq dpo8Vrv3gFTQDeMYxk7cqZp08pIVH5XR0+LgBz4X84f59rA/VAKlC/r6CyEQk59rvDLxCMyP 2buoj51Z25N3MVghRDGcsU6mT7e5AQ0ETspYWQEIANGc4zQULOxhbqO2dyD51YhqCNRmm9oK Waqf+wmW4tpDe/VVcxAnNizd4LWCHfzpb5cHAtGkOPePMfzWVf6nvdF7d3eglbtf59+zG7O7 llV0xSSoFiieQBsrGvqDInXYX/4mRRXMtyhM353/tixC9RWLs1oofyYmCPPXXY7h9R7en3B8 BoVrRFcdzlIY/NFNhFGW/9dkEiGjgna2Rk6e15kln4ZvFBWUg23p93w/pqXcxY6+k/8TEk+C 4R+M6w7o2PLGOjdZ+kPiUcw5H85zf/yZJwQXzisXaNduwWB6Vads9YC9dj6kPR1c4VGRqAaY L++LAEOqrlvm2TvqQqZRtnEAEQEAAYkBJQQYAQIADwIbDAUCXdaUtAUJEs6jVQAKCRCZ+n/L Wfw7gQi5B/9sHbmRloZNCWWwZGm+O9iG/JGQxS0WWa4GaZqzqSTWOft2/gO0Bgag89r1djq4 PFgSZtzHvKQpqYz/7HkPrWh1jpcS83i/uYY1uyHXUUtpdEmn4buNObEtD0YNaJkGdhASsECq 6akw+u7WJYmAHs/SpR6ok6HqLw7JHDVc2h5dViLfTk0qrgDa7sq/LVMoJje5Ct/Ku3YaWAV6 YSmzoPP5BmPVFqP11OMQkCqurIu9vTLXKFWX623vCmqRDHJ6e5GCDHbH8USU+4wJBfPymZkd cA7NGm/mmWeJiWBFIDyjzYxrjku8ty9TZJVsaRXnS+OFQzXz9Eu2wTpKdHij46uY Message-ID: Date: Wed, 15 Jul 2020 14:35:40 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Content-Language: en-US List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 5/15/20 4:46 PM, Daniel Gustafsson wrote: > > My plan is to keep hacking at this to have it reviewable for the 14 cycle, so > if anyone has an interest in NSS, then I would love to hear feedback on how it > works (and doesn't work). I'll be happy to help, particularly with Windows support and with some of the callback stuff I've had a hand in. cheers andrew -- Andrew Dunstan https://www.2ndQuadrant.com PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services