Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l21Xo-0005Sk-DO for pgsql-hackers@arkaria.postgresql.org; Wed, 20 Jan 2021 00:40:20 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l21Xn-0002kF-5Z for pgsql-hackers@arkaria.postgresql.org; Wed, 20 Jan 2021 00:40:19 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l21Xm-0002h6-LC for pgsql-hackers@lists.postgresql.org; Wed, 20 Jan 2021 00:40:18 +0000 Received: from mail-dm6nam11on2073.outbound.protection.outlook.com ([40.107.223.73] helo=NAM11-DM6-obe.outbound.protection.outlook.com) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l21Xf-0007cN-1N for pgsql-hackers@lists.postgresql.org; Wed, 20 Jan 2021 00:40:17 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ETgkWPX4Y4ovgVCaA46aXHK3uuHbvcCzRfVZ2jaSytTHPfno8+qXY1uNbwl2yJjAplHWvWcq9oFQZKgcJ60+lNEG3Wn9M2NkknkVC6raxI77aZVhqs+YAl92LqetmNXUxIF/rXJdYdew1hNwa16PBDGEN6kHCeiqCHRAH1GhC3VrTMgdfCEK8J/fBEO1wueMJsZM94SFHKuU1QVx8O34xhPlvSfutiNpE0KMtmxJY0peVda9WQOfOWQDS6G5WZFhCA9QYAKzoUdKtrIoT95FyAp6Q1ElCOFNYz8KUWkeHszqRSNI45ZyPCA0rRXiShVwfgDju5AzkU0ef98MX++pjA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gnqah3exgzClysMILVrE4EJsMosvS+7DeJC/BrpSyHg=; b=CgLcf5/UFugyARoiEp/8b/BcEc+YcoNH8rWUa3VnXTm1ys+ya2OwvLh2qri1/WAsecvTRjkZlkoAdG59vOfCpveFT/LwF5/gWnKZ3zcDrkEgqiu+ocfn/hWrwkcQBYZ+E5QTF3a1JKxAQ4itaFm2lCHuJn0tG6uu/Yty8ijkK2y9Jv9PV0/x7c8WXAORO6BF+yb/6PXWr1SfVmQsp4uUa5GG2yBOvAWFf3unVlr3q13AWhA9uRoDb+tNn1KTTiaD4Ew4pzFQWir3mpxAwqLWAiRyf/5RWueLKOMCJH4u3G4gzEKtaqu88qpTfh3YCU/bqoY7XrWmaN3tD5X36HOPfg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gnqah3exgzClysMILVrE4EJsMosvS+7DeJC/BrpSyHg=; b=obAS8Zl1eQzAQgAOrH6pMKjbDNownl50RBuytWa3+a0atAaIBaQIzchX4slkAvpjzG/38pnD7OX5y7VJ8CPAJgNNDriNp4tZN8wKAtpJapTWsreqiVFWqICQOmGFTY447PoB+IUKtlQybqLQynZb31fReaeAJBvt1oRj4/1j/Gc= Received: from (2603:10b6:300:65::20) by MWHPR05MB3663.namprd05.prod.outlook.com (2603:10b6:301:47::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.9; Wed, 20 Jan 2021 00:40:08 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3784.010; Wed, 20 Jan 2021 00:40:08 +0000 From: Jacob Champion To: "daniel@yesql.se" , "michael@paquier.xyz" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAA== Date: Wed, 20 Jan 2021 00:40:07 +0000 Message-ID: References: <0E64F3CB-4731-4FA8-82D8-D8590086654C@vmware.com> <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> <5C27CF6F-5BD3-4639-AAA6-73465595B6DF@vmware.com> <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9ead27ab-41ec-440e-9ca5-08d8bcdbefe2 x-ms-traffictypediagnostic: MWHPR05MB3663: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: DgEfbAIHyT3Knk7nDHUAlNb7cRg9lHkcxzWR0nk5iH3o2vOl+zkonn7fp9NzP5ekm8LFtbbzcaoFn72wppoM+jKUV9sOfwSAVY6J9YnTGPLzVJH894I/aShlTG9MhXILIYcriIUcTsuxdNKL3i1fgNfinFDLpRYKvhrpo4D6/z77JZSX6fnxKNMTuK9coL9KzEpGa0itj+yCUuueG55Z/YEm8wGQVr6GzqY0TuS1OFZq6ko5Dt3bp7xPL0jPbtsVF9BXFZNZFX/xhMqg1suX/tjR7pQAY0mHvxibKmWlvzmcIRC5LsCG10PKdy24erGEfBqn0By810la9qcfSjuf4CaULmXY6K3mz+AGSQhbLxEqFjvCVFVMDcXmCg/EX3ZN9z1cZcAOIbCoxWRrm6E0vQ== x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(346002)(396003)(376002)(136003)(39860400002)(316002)(2906002)(66556008)(64756008)(66446008)(83380400001)(86362001)(186003)(66476007)(4326008)(71200400001)(54906003)(76116006)(36756003)(66946007)(110136005)(8676002)(26005)(478600001)(6512007)(8936002)(6486002)(6506007)(5660300002)(2616005)(4744005);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?ZStkY25JMlpRcEY4c1IwRmFpY3RvZ08rUW1oaU5YT21ySEM3UmMxaFZwQTNy?= =?utf-8?B?VWJldG5Cb2Z6RXdwTkhQSnNRNkZlWitYSU9MQWRmUzY1amRraitaamlWSnZo?= =?utf-8?B?T2Qxak9YRmllSDF0Ykxoa1hhR2dZUG9KVjUwc2dNVWNidDhDb3crZThwclYw?= =?utf-8?B?N0VNVmF3UzNUY0UvcnRjVzV3SkhoZFRmamlsM2FaYitFNE01azkvYmZlenJE?= =?utf-8?B?Qm03dGhmczBUTHVXWkYySlAxVi9pakZkZXRnZCtWaUd4Qld2c0hZRHEzVExW?= =?utf-8?B?ZDFSQnBEODl2T0VsRzA4eUMzSVg0WWIzWUhPL3Z4VnRUdmxKUU83bTNJWEN1?= =?utf-8?B?WmMxbVJHMWJKMEZvWXhqWE11OExFc2xNa0lZS1E4aEhqbjFWVCsralZBMi82?= =?utf-8?B?WGp0S2pPRDQ5cDNmN3BzS2cyaGRuR0N5OW1zS2FyUFFVUUNkdTdHbmJpWGl1?= =?utf-8?B?dGUxTVhjYVZ2bEVvYWsrTFZ4ZS9rTHRDSUl0bEljQk1pY0pKZFRBS2JKa0Jm?= =?utf-8?B?cWkxbzBoYWd2ZjBnV2twbWRWSDlnVk9MY1JzcmxxUlZwL2lpcHNaYVVqb3Va?= =?utf-8?B?OXlpNG0vV3JLMXE4UlNqUTJqNjJ3MGtpbDNwS1JTTVJhczBCRHlrZmlLalFt?= =?utf-8?B?SWhHdi9DdXFqTmtSUWdnTDVTemp5Qzd1U0VrMGtCZ05KSU85cTJ6Wk1BRXFo?= =?utf-8?B?QkVlbTFsS1Q0S3ozSW1yV0xGYVMzeWptQmJXWGtIc0FVV1NRUjF4NndLT3h1?= =?utf-8?B?anptNGRTaGE5aUpxUEhXVjlXVDNFOEcwYU1uMWVwNVpTNi9XZ1R5MlJhM0tn?= =?utf-8?B?am9TNzlLUUkyU2Via1VsemI5NmNnWGRkWUxRWityRnk3RXlvU3ZUYktqRGEv?= =?utf-8?B?dUFQSldjSldLMnhaOUNoU1BSUHJqanByMzZDV1VwZ1hBVkZOcWVpRFlNMEE1?= =?utf-8?B?MCtmV2RuUGJQZVk3N3F0ZDVWWTJ6cWtiMjU2YlkrbFlqc1BSeUw3bFhPWmhS?= =?utf-8?B?Zm9ac1ZVV3pPa3c4T0dUTTZnRXZTYi95cnRoaGJwQ1VYV2JMWHp3bGZITGRi?= =?utf-8?B?bHRTZUdPN3FHNlRiUFRBejFtK0ZIbHh6dDRyQzRQTWlya2tlQ042T1g0d3J5?= =?utf-8?B?a3BoZGI1R1RXeTJYa0JOeEFOblpqYUVpZ1l2dGxYekxocGlaNnBnUFlRV3d4?= =?utf-8?B?c1BpUTNBSkFuNHV2RTJ2VkhEb3N1UFBja1FOQVNzV2YrTVVLTmhJN2NLc3hm?= =?utf-8?B?dEh6VkY0YnBTU3ZoeDhIZmJ4MjhUUHNHbldKVTFzcTB0cUdiM3JCRXpSU3hZ?= =?utf-8?Q?oEPym5pILyXYlRCzEruZ75xaKque46Aked?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <0CE6248D60137B4498B3631A0CCC047F@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9ead27ab-41ec-440e-9ca5-08d8bcdbefe2 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jan 2021 00:40:08.0761 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HL2unzp7n8L02DahbNbIh2bPpsE/rziti8CyUSpmuiw3hO+ZiCybWuOHW77HTpDoeL42i1QTgt4u8jei5t1Swg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR05MB3663 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gVHVlLCAyMDIxLTAxLTE5IGF0IDIxOjIxICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gVGhlcmUgaXMgc29tZXRoaW5nIGlmZnkgd2l0aCB0aGVzZSBjZXJ0cyAodGhlIHRlc3Qg ZmFpbHMNCj4gb24gbWlzbWF0Y2hpbmcgY2lwaGVycyBhbmQvb3Igc2lnbmF0dXJlIGFsZ29yaXRo bXMpIHRoYXQgSSBoYXZlbid0IGJlZW4gYWJsZSB0bw0KPiBwaW4gZG93biwgYnV0IHRvIGdldCBt b3JlIGV5ZXMgb24gdGhpcyBJJ20gcG9zdGluZyB0aGUgcGF0Y2ggd2l0aCB0aGUgdGVzdA0KPiBl bmFibGVkLg0KDQpSZW1vdmluZyBgLS1rZXlVc2FnZSBrZXlFbmNpcGhlcm1lbnRgIGZyb20gdGhl IG5hdGl2ZV9zZXJ2ZXItKiBDU1INCmdlbmVyYXRpb24gc2VlbXMgdG8gbGV0IHRoZSB0ZXN0cyBw YXNzIGZvciBtZSwgYnV0IEknbSB3YXJ5IG9mIGp1c3QNCnB1c2hpbmcgdGhhdCBhcyBhIHNvbHV0 aW9uIGJlY2F1c2UgSSBkb24ndCB1bmRlcnN0YW5kIHdoeSB0aGF0IHdvdWxkDQpoYXZlIGFueXRo aW5nIHRvIGRvIHdpdGggdGhlIGZhaWx1cmUgbW9kZQ0KKFNTTF9FUlJPUl9OT19TVVBQT1JURURf U0lHTkFUVVJFX0FMR09SSVRITSkuDQoNCj4gVGhlIE5TUyB0b29sY2hhaW4gcmVxdWlyZXMgaW50 ZXJhY3RpdmUgaW5wdXQgd2hpY2ggbWFrZXMgdGhlIE1ha2VmaWxlDQo+IGEgYml0IGhhY2t5LCBp ZGVhcyBvbiBjbGVhbmluZyB0aGF0IHVwIGFyZSBhcHByZWNpYXRlZC4NCg0KSG0uIEkgZ290IG5v dGhpbmcsIHNob3J0IG9mIGEgZmVhdHVyZSByZXF1ZXN0IHRvIE5TUy4uLg0KDQotLUphY29iDQo=