Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lPZsw-0007VE-KO for pgsql-hackers@arkaria.postgresql.org; Thu, 25 Mar 2021 23:59:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lPZst-00054R-29 for pgsql-hackers@arkaria.postgresql.org; Thu, 25 Mar 2021 23:59:27 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lPZss-00054B-AC for pgsql-hackers@lists.postgresql.org; Thu, 25 Mar 2021 23:59:26 +0000 Received: from mail-dm6nam08on2062.outbound.protection.outlook.com ([40.107.102.62] helo=NAM04-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lPZsm-0003MP-CL for pgsql-hackers@lists.postgresql.org; Thu, 25 Mar 2021 23:59:24 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=M21sw0Y4uJHz5oaWrRJKq4ulSwh9vED35kujbHZe5Csy/IPICfLPozX5Q65LLGcZyE/abKUaPAb7LiMsImbXMrSSpzbeJlhTZYNGpuvJz/YYMPCxzJ22VUpnWJP2yHKZUholF02ml03ur2YmKMeNmMCpPKJw+b+55jq0+MGtbZqGGHlzOwZgYoJ+OYGVciSht/FnQ5BiPshVWWNa1gh8Lfk7NgXZsmc5FA6zeiBxBwEHLYS1GyF6UTZIROfunsJqMXbCES5PLEG2oCI+nLW/0v8j5UaffRKOfVBz2tA58RYAnkAYPpTkZrTCTw9RTx6Jg/77+866LIiv+O63RqVLCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=O4zwhCoah4nKrxgFbsMMk3L7v8NQDa/x5Ef6IawxcpM=; b=M2bgPjTFW4FgCosSlupnz4FtRr4CYRH0cqpxP6GDqGihf3KhYQjy2/HEB8Dm8DjFRh/GlFQho18pOeZuTLNwDxYVl/OqSDlUe1D7uKkVq9x0wpL3jl8uzQv9nK5iUESwC68MTsFKEL+57NvSzq1pazbnthQ9jfpUuN840vxucl8E9CksknPlXx9TO7fkpBCG/Gp/R+i6BheZPEpCELRvm4eOSIIdf2Jc6uL7Q9d2omVFMSjhW7uqnRrhQbF5kXqweGloENmKHhlyMmSo6iTYwlwNKzYKA4WtlUAA6CdbZTOs8QW65ObuXerzKf3mpxivsItzNbIZfP6+68LUGUdXQw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=O4zwhCoah4nKrxgFbsMMk3L7v8NQDa/x5Ef6IawxcpM=; b=xrcnnjvmM2jFabpSmJ1SYz5rBSwi69PGSmplioAq41OGXn2VmYUt6TyNQKFDWuy5YYx2eS6Iz6008CTKmVmvp9G6sFlcK1tTMuBgP1UqbtI4WXQx8U1b3kIz+CA7qtrGi96XAoLE9D3owYb6QgsldzGMH5j2Vx6+5x4NZ/HrfRk= Received: from MWHPR05MB2896.namprd05.prod.outlook.com (2603:10b6:300:65::20) by MWHPR05MB3053.namprd05.prod.outlook.com (2603:10b6:300:b1::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3999.15; Thu, 25 Mar 2021 23:59:18 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::4c6d:a666:643c:9244%8]) with mapi id 15.20.3999.016; Thu, 25 Mar 2021 23:59:17 +0000 From: Jacob Champion To: "daniel@yesql.se" , "sfrost@snowman.net" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "michael@paquier.xyz" , "andres@anarazel.de" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWAgAFJBgCAAknrgIAHT2aAgACARQCAAC2WAIABbrgAgABSL4CAC5w5gIABgPEAgAXTZYCAAkVWAIAAzGsAgArFR4CAHUTDgIABj0AAgAFFrICAA2zGgIAACkGA Date: Thu, 25 Mar 2021 23:59:16 +0000 Message-ID: References: <0F5CF84D-26F1-44D0-AEAE-E011D3CEC0E2@yesql.se> <686dd2b189ec04b161f71481f1f726255ee8224f.camel@vmware.com> <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <20210323190427.GN20766@tamriel.snowman.net> <051B5E92-066F-4079-8C40-01009CFEBC4B@yesql.se> In-Reply-To: <051B5E92-066F-4079-8C40-01009CFEBC4B@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: edd59c58-f043-4228-7b80-08d8efea0013 x-ms-traffictypediagnostic: MWHPR05MB3053: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(346002)(376002)(136003)(39860400002)(366004)(396003)(2616005)(6486002)(8676002)(316002)(6506007)(4326008)(8936002)(36756003)(478600001)(71200400001)(53546011)(2906002)(110136005)(86362001)(66556008)(4744005)(83380400001)(64756008)(38100700001)(76116006)(66446008)(66946007)(66476007)(26005)(6512007)(5660300002)(186003)(54906003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?aE9JYXM5OCtNeENIRjEzcVRoWmVGaUUzcndpTkJWaWZBVFVsRXJoTmhReVYv?= =?utf-8?B?VFBDSWJ0NHdSQWVRT2Q2UmFqZXFKclVVMHdBSkZDWnA2cys1bjhNMXNaS1V1?= =?utf-8?B?Z3BkTXcyVTVBaTBvRGwra0VVZDZPb3ZmQ1BZVFVxM3VueThFSldKODdKRE5o?= =?utf-8?B?SFNsRUtHUXI2Vi9sRGxIMTJrRmRlWFYzMGp5OXJBbjJYc2xHYXlQeXp0ZFMy?= =?utf-8?B?VXMrL2RRejlzWEphWkRGZjV6OENpNzRtM0JKTEluZmpxWm53V1gvbGdnTmxD?= =?utf-8?B?YUp2VHp0YWxnWnJuSXdDM0t4dVBwZ00yaUNCUDQrdEhFekEzQ3hxdWVjUjVt?= =?utf-8?B?T0I1a08ySmtIcUhzSzBqdFdKeW5qWUJ1bm9FQTBBUWFTVkxMWEl6ZTR1d3Ba?= =?utf-8?B?dlgxQ1hmb2VGZFB6UWRRNGUwVlArd1p2ZGxiZ2phVThab3hrbzZud3QwSUwx?= =?utf-8?B?UTNhTUF6NVU3MW5aejJYSUY4elpKSTB4bEpnTEJBUkZXN1czS2JJWW4wUGFy?= =?utf-8?B?aTN6SDFraDVHZVRGdHpLSlVndjcrRVR3YnFYUFphWXJsVWx2UFlOYk9sV3Fm?= =?utf-8?B?U3pBRW9OU0R3QlZUcjlvODNFekJnMTNXYklNWVV5cndHQ0d5K05yd01sK0Ux?= =?utf-8?B?NlhqSTJUU0xLaVZHb0RUR3dPbXFISzkxZ1FHd0tGdDZrb3czRW1DSUdvZ0Rm?= =?utf-8?B?TGlMZ2dvZWFER21OWlFJeU44bVczckF1dzdUMnI0ZDFocFNMWng5UmNadVp1?= =?utf-8?B?Q2pqTVNLVjRoUGZISmltS1hPWXE2eWNGVzJtbm85Yzg5KzZLaFRtbjgvd0pi?= =?utf-8?B?SkEyME8xanN1aEllQ1duTHZLYWE3UVo4K2lnVW10eStaY2dhb2tzV00vc3oy?= =?utf-8?B?VE5PaUtXWGJZbWVCeVVPS3UxOUphTlFUbjN1TEd4aDBJeWwvNXUzMUNPVTlQ?= =?utf-8?B?OEhVVjhoVXVGR3o4VkF4di9vUk45N2ZsY2tsQm1TdGNsN2lyM2NOdHpXQUU4?= =?utf-8?B?cDdYKy9PeXJ1OURzQWoxYXZ4ZWxuQUsveVlXZktGenN5UC9ZS0EzZEZVb3NG?= =?utf-8?B?cERFQXZkWTJMUUNYbnFISDNpZFFHbnJCQ0JDQSs0dlF4Szlsd3NzQ3h5N3Nn?= =?utf-8?B?YVFlNkZlaEUxK0hpaXNQcUtHbFNGZE0vOEkyUXJ2SysxUzhhUVJxaFluVFEx?= =?utf-8?B?Nk1KdVlsQlBxVVVWM3EzK3RRY2wvaStRUjZzRUNWSzFZelY5SFVodnBrUThr?= =?utf-8?B?YjFYMXdlNjl2U0FZdEt3NmZKcEtrOExmSEFTVWlvZlRpWXFRM0hpUlNoUFVL?= =?utf-8?B?NnluendMaEs4M08wem40ZStzMVE5TmFOYVVkcjBndlBDTUx3ZXhWK0cwaWZL?= =?utf-8?B?QVNWanp4Vkc0MDVjRTFOd1A4SHFHSEJZS0lwV0haVTBTSjRVekFqazlmS2xT?= =?utf-8?B?cTY4YXVmU2FMbUd2Z2N3bjhvbEROd2FtbXR2dEpVTDJ3T2I3MjQxVnJJWlR4?= =?utf-8?B?Y0RCN3NJcWtZY05hSlNlUStWa2ZSL0lpbGtVQk1nZ0VFL29rMFg3YzhUNkh5?= =?utf-8?B?Q2oweGdlbTJobzhCRFZsOWNBS2JBNDZleU5KMVN4ZEhQeXZJeFZUUkhyblFS?= =?utf-8?B?TldtWWZ4TVA5SXdPaFJ3VmtabTVDSTAzMDg2UUcrUUZ6dmRjNGcyRW9MQnBZ?= =?utf-8?B?S2pGQXhKZXF5aE43SFdIUmMyU2pRRUpPWHlIWW1GNFhhSVdzYWJqSGlpcHV1?= =?utf-8?Q?gpfsoKEGygr/tVoYKKtymB3+aXkzRxuv+b9HAw5?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <8680B659D4C63645A8A3D7285F19BA71@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: edd59c58-f043-4228-7b80-08d8efea0013 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Mar 2021 23:59:17.0210 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mlfGPQQ6eA8VFMrHkk2RhCN2y89OWsDFld9yba+F8PL65Py1RvdlhnC7YokTLcL1+4OWXyJE7m2vqQp0hzRpiQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3053 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gRnJpLCAyMDIxLTAzLTI2IGF0IDAwOjIyICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBPbiAyMyBNYXIgMjAyMSwgYXQgMjA6MDQsIFN0ZXBoZW4gRnJvc3QgPHNmcm9zdEBz bm93bWFuLm5ldD4gd3JvdGU6DQo+ID4gDQo+ID4gRWgsIHBvb3Igd29yZGluZyBvbiBteSBwYXJ0 LiAgWW91J3JlIHJpZ2h0LCB0aGUgcXVlc3Rpb24sIHJld29yZGVkDQo+ID4gYWdhaW4sIHdhcyAi V291bGQgc29tZW9uZSB3YW50IHRvIGdldCB0aGUgY29udGV4dCByZXR1cm5lZCBieQ0KPiA+IE5T U19Jbml0Q29udGV4dD8iLiAgSWYgd2UgdGhpbmsgdGhlcmUncyBhIHJlYXNvbiB0aGF0IHNvbWVv bmUgbWlnaHQgd2FudA0KPiA+IHRoYXQgY29udGV4dCB0aGVuIHBlcmhhcHMgd2Ugc2hvdWxkIGFs bG93IGdldHRpbmcgaXQsIGluIGFkZGl0aW9uIHRvIHRoZQ0KPiA+IHByX2ZkLiAgSWYgdGhlcmUn cyByZWFsbHkgbm8gcmVhc29uIHRvIGV2ZXIgd2FudCB0aGUgY29udGV4dCBmcm9tDQo+ID4gTlNT X0luaXRDb250ZXh0IHRoZW4gd2hhdCB5b3UgaGF2ZSBoZXJlIHdoZXJlIHdlJ3JlIHJldHVybmlu ZyBwcl9mZCBpcw0KPiA+IHByb2JhYmx5IGZpbmUuDQo+IA0KPiBJIGNhbid0IHRoaW5rIG9mIGFu eSByZWFzb24sIG1heWJlIEphY29iIHdobyBoYXMgYmVlbiBrbmVlLWRlZXAgaW4gTlNTIGNvbnRl eHRzDQo+IGhhdmUgaW5zaWdodHMgd2hpY2ggdGVsbCBhIGRpZmZlcmVudCBzdG9yeT8NCg0KVGhl IG9ubHkgdGhpbmcgeW91IGNhbiBkbyB3aXRoIGEgY29udGV4dCBwb2ludGVyIGlzIHNodXQgaXQg ZG93biwgYW5kIEkNCmRvbid0IHRoaW5rIHRoYXQncyBzb21ldGhpbmcgdGhhdCBzaG91bGQgYmUg ZXhwb3NlZC4NCg0KLS1KYWNvYg0K