Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ms8QB-0002kS-9Z for pgsql-hackers@arkaria.postgresql.org; Tue, 30 Nov 2021 19:04:07 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1ms8Q9-0008Oz-0h for pgsql-hackers@arkaria.postgresql.org; Tue, 30 Nov 2021 19:04:05 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ms8Q8-0008NJ-Eo for pgsql-hackers@lists.postgresql.org; Tue, 30 Nov 2021 19:04:04 +0000 Received: from mail-mw2nam10on2045.outbound.protection.outlook.com ([40.107.94.45] helo=NAM10-MW2-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ms8Q4-0005zN-02 for pgsql-hackers@lists.postgresql.org; Tue, 30 Nov 2021 19:04:03 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FBTmgqefG3iY2EqZznr/UQeFbyqn+1LKE19NQP4AESGnXsxJpu3Z3Lfj/Im8ukLejfOx+PgIMrnM0N6AwRAMeag4Ch3VN9liP4+SMEGfvEbS5zvTciqpL2BXsS0VW5+TGWjqnmQ2hHG1mcYqynfGsWCxmXWh9zB+3RWQbWgXHRcTAL29voR24qoduLh24i0McrDqnXsk1sdvgqnxtBUIafRhll2+4q7LtwAb8Y9F0VVxuZxR/oIr+EDSblK1sk+1i6KmID89THsrHh+yZKK3JSffx6Q4Fv5CqIrMZolPTkrA4f6IZiPshyhzKa/iiQykhYy9DVic+oEdDXMb5zAvaQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=j3IyDevhH8Og1obxGi3BbjVEK9PFsa5C3kLAFDA0BbY=; b=hKuIuspoiiqqh+RJy/NT2V3f4snjHYC8rh+DfUwLR7/EPSG45V1tpPh8ao4xzahIewZ66CZouGfbd/B/5IP6qoZtfl9VfVXWNWDq5A9PNBhyqjbgszxs01OConLaDdrA5NDNdad45OsiqXvoZbE4gvRjrfVS2T1awurCgAXt/tTOUdAsE3bXYEcTp383t6kEPHWz3iLYeZLgYE9G/Dkls622tS3p3iyRf/acsYRmG1z7NZWN3KJd7CQ0GzeLBSOkOmsMfkM4stMh3vZv5nzJJpAi/z7u1LWr7inI/WKF/zi30k+95LwL6IHZFB5cyGnbu5ftl+ufWEZQNIkL/+1ZVQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=j3IyDevhH8Og1obxGi3BbjVEK9PFsa5C3kLAFDA0BbY=; b=0FKYHP96vSPOx0iopeQoxXr6xm9gjcf0arMw5KnlOHLhmwCW/OXI0geP+cD8rVmgM28HBeHNEQV3P7xGfpWAL2SKvASqIg8K/mCYUS+jU/h/pON2PGZ+LYi+rmSSeU9t6z64ngKR9eK8Yo4ms7g1RzkrC5SJTJT9WA+pX1q0fSE= Received: from BY3PR05MB8083.namprd05.prod.outlook.com (2603:10b6:a03:36e::19) by SJ0PR05MB8149.namprd05.prod.outlook.com (2603:10b6:a03:38c::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4755.10; Tue, 30 Nov 2021 19:03:55 +0000 Received: from BY3PR05MB8083.namprd05.prod.outlook.com ([fe80::28bb:8acd:7401:7ce]) by BY3PR05MB8083.namprd05.prod.outlook.com ([fe80::28bb:8acd:7401:7ce%4]) with mapi id 15.20.4755.012; Tue, 30 Nov 2021 19:03:55 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "pgsql-hackers@lists.postgresql.org" , "hlinnaka@iki.fi" , "andrew.dunstan@2ndquadrant.com" , "michael@paquier.xyz" , "thomas.munro@gmail.com" , "andres@anarazel.de" , "sfrost@snowman.net" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: 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 Date: Tue, 30 Nov 2021 19:03:54 +0000 Message-ID: References: <1b16041447d57b45ca273f41d26f6e298d756f99.camel@vmware.com> <04E81B50-ACE9-40D3-9C66-7041F969A958@yesql.se> <21FABD55-5F80-4D8B-B994-3DB81D8742EE@yesql.se> <20210321234950.GQ20766@tamriel.snowman.net> <743a11e6668bef648c7a53f862038e6b2fad3755.camel@vmware.com> <05da9d530ab01e6959bd50c993d590ad73575c21.camel@vmware.com> <20210324170036.GS20766@tamriel.snowman.net> <8f741a425fd135ca38a28063730715499f7f6445.camel@vmware.com> <20210324181016.GU20766@tamriel.snowman.net> <50c5a423329ea9996a2a2b167931711189ed5d1b.camel@vmware.com> <2FD5BB88-595A-47A0-8F51-0A1B5EEC93FA@yesql.se> <4a15bbab42cd85b6bec83c2609305552d246f68e.camel@vmware.com> <8335133C-920E-438D-9CEB-DEF4C1533F73@yesql.se> <4ec146256e31afa0542f9fa970ec258c5f1a5f98.camel@vmware.com> <70A12E33-90B8-4761-8FA6-8DDB9EEA4D3E@yesql.se> <14b33300304507db6f4e4d8a77da105a8d18ea1a.camel@vmware.com> <02AB4044-0823-4F77-B69B-18DB378C8743@yesql.se> <55c94351495efe34e167d4d2b1541b8194f1318c.camel@vmware.com> <55454C3B-1BCB-4F08-AB93-FAF9100B6201@yesql.se> In-Reply-To: <55454C3B-1BCB-4F08-AB93-FAF9100B6201@yesql.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.5-0ubuntu1 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=vmware.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6f47a7b8-14fb-4629-b638-08d9b43427e1 x-ms-traffictypediagnostic: SJ0PR05MB8149: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BY3PR05MB8083.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(366004)(316002)(54906003)(66476007)(86362001)(66556008)(71200400001)(8936002)(64756008)(66946007)(6506007)(2906002)(66446008)(5660300002)(38070700005)(2616005)(36756003)(8676002)(83380400001)(4744005)(26005)(6916009)(508600001)(4326008)(91956017)(122000001)(6486002)(38100700002)(76116006)(6512007)(186003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?akdMV0VwbjdnUzk4bnV1NFFkeXN2ZXJ4eC9uSElEc3dUQ29zdjMzRnZOcXNP?= =?utf-8?B?ZGMxVnVGWlNkMVhMc2hzc2srcUUrelFaVSswLzBmS3htQTNFRmkwbGpNVlRS?= =?utf-8?B?MjlZL255Tml5NEJ0RWxlSmlvWUljdzFxQy9rVzZoaW41c09Qd0pEcmI2ZElS?= =?utf-8?B?MnZYcDVacm01S09EeGJ6aEdVNnlqUk0zZFRaR1VYV0dlbEdBc1pFZ2YyeTl6?= =?utf-8?B?TXlBdUVoMmRIMFp1N0FKb1dsSkt6Q29YY3BJMFBNMXJHWXdkZVM5UExZM3dV?= =?utf-8?B?L2xBMlBpSXRZaE9FaUxjNnNLWWZXOXg4SnZtcTlicWFuS0pGQ3RCd09TQzNS?= =?utf-8?B?cU9aRnEzK0RtN0pUZTRYaEhJM2NvUExySTRIMm80NjdpU0RnVVd2Mkt5bXFl?= =?utf-8?B?T0dkZG1lRXdnVnZucVNaN21tZ3BHNEJYTXdOZ2NtMXp1Yy9RK3hnT205VXB2?= =?utf-8?B?NDhTZkhwaEVsekwxRzI5VnhtL09CQkwxTCtUbDZ4eVdibGw2NkE5STFoUUhI?= =?utf-8?B?TnFFVm4rdThFSWJOZlJqSnEwY2lxd1F4d3dqMnVKcmRQM2ZXVU1hMUljdGhD?= =?utf-8?B?WkJZRUU5YXAzSytoTWtkNHhGcHVtTTBtYmpYNzQrLzdkb0ZMcXRCdkdKczlJ?= =?utf-8?B?TVFRdE5lRVN3NGl4Q3g2Z050ekxqSCtmcEFRUjB6U1NOS05CZXZiaWpEUzNn?= =?utf-8?B?MEh5ZFQ5YmxlcEk4RGozNU11QUVHejR6NDRFb21hbEJSbGNtaEFBN1lIK2Nv?= =?utf-8?B?cjV4Q0h4VUY2RktpSE5SUFZsbVB4ZFlZRTBSM3VWYnBOSXVUemtKTXZEeG9I?= =?utf-8?B?cnRQdWlTNms0UFljY3BXZU93SkVDcTBOSHJ0b2ZVVjJ2NzBkekhXWnM4M0JC?= =?utf-8?B?WEkwV3BRdWwxNlNSV0l3MEJIb2lPTWdya1hMbWRBdkZNc1Rka1pYd0xJRmRj?= =?utf-8?B?a0x0YnoxQ1dqQ2RCTStYa1pRNDM1RXQ2Vyt2U3psQlJOVEc2Mm94ZUl6TkQ5?= =?utf-8?B?aUsvN2FrcHd0N3pYdjQ0TTNtNmcxUFk4SGlVaU1Sa3ZSTjR6N0lvK1RoTFFX?= =?utf-8?B?eXo4SGF0Nk1RWngzcmQ0WkJCOURRSHBvOTRDTi9uRXo4ak01bXduUklCUWQ2?= =?utf-8?B?WElEbXdwSEJMUzFmZ2JobTM1L1dIN1laVytjWHF0RTlrOFFuYkU4RWdOMzU1?= =?utf-8?B?aXEvMWgvZFB1MXlON005TWwydGxEcENHM0t6RFdGWFJKUjgvTVBhT0w0Y1FR?= =?utf-8?B?NjV5TnVxeTBzY0wyeTVtMldVTGlrM1o4emNtcytqaTlxOGNvUk1Ld2NqNVdS?= =?utf-8?B?cjRiV2VUWVEvN1pwQ3c0S2FPdmlqUFM3L0svRmtPaE93UVF2aWN5dHdNRFpZ?= =?utf-8?B?cHF5K2Z0R3NCazJyR1hWaU5INTJtY1JvSlNtSFFrZ0pzbUxvL0RWaGdHUzZ6?= =?utf-8?B?TW9kNldFU2x3Z1RYalJ1QU9MbGQzNU40OG5BclNTbzVQMy8rZWUvdHpEMFlt?= =?utf-8?B?dTJTN1ZGWVloYitpd0dydXlzMkQ4UlQvYmp1R3ZtRUFNNGNFcVI5dnVyODhJ?= =?utf-8?B?eXdFVnNDaDZEOWdlT3gydGxFUE5YYWMwT2poZCtTM3I2MXQrNC8rZHNnZVI0?= =?utf-8?B?eWdZZm1ZRzNYRVc4bmVmYThweWJpU3NQUTFjdTBYMmhiRWp1YTRYay9ZREtO?= =?utf-8?B?Nk1UbG9sK1BaRGEzNGFXS09MZkxuNk1DVSthOWlraEFFTnJNd3UwMVk1Ympq?= =?utf-8?B?ZjJodm0xUTk5MFZJeDNacXRtcUNtZ0lxSnVTenB5bDZ5MnN1RlBWaG5NN29v?= =?utf-8?B?Z2xjSHdDSmFsSWZ2TG8rK1l3Zzl4Rm4zYVRqQ2ZYMisrY3FIRFltRGZ2ckF0?= =?utf-8?B?Vy9FZEgwSTk5Z2Vmb3pZQ0pvWkdLdlh3aUNXY1FOamZaSkM4OHQvQmxXZG8x?= =?utf-8?B?TEJaQTNTWmlQWHVtYkdyNC91Qkh5djlBQTMyUlZBaXZHeGtOYi8ycW4rRzln?= =?utf-8?B?aUpza1RQQzNSMGptVkM0WlMxSmE3YThpMzNHbTJVWjdkSXBZcURoNGlvd1J6?= =?utf-8?B?QUJyWU8yR0o0dFFKSDQ2N3lYMlJPcTFhUE1seUJ2T3FLZWlVbDdlbHNySHhF?= =?utf-8?B?anpEN1l1a2JPMXdDQjhnWmp4VDErUnIzTHgwZ3g2eEJDVWR3eU1mRE8yb1Vi?= =?utf-8?Q?Thyt73MRK4HYy19DBQJ2eV4=3D?= Content-Type: text/plain; charset="utf-8" Content-ID: <0A34A5D393FD48469F1D54AD5A8E269B@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY3PR05MB8083.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6f47a7b8-14fb-4629-b638-08d9b43427e1 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2021 19:03:54.8963 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: aczDhxApA37hVhzWtc4HOySSjAftKJOEQHbJ/DwWwFopEg/jAaR7dUN0Oh2pK5ZhlmjWFD0OAVyUfkPE4EUTAA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR05MB8149 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk T24gTW9uLCAyMDIxLTA5LTI3IGF0IDE1OjQ0ICswMjAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBTcGVha2luZyBvZiBJUCBhZGRyZXNzZXMgaW4gU0FOcywgaXQgZG9lc24ndCBsb29r IGxpa2Ugb3VyIE9wZW5TU0wNCj4gPiBiYWNrZW5kIGNhbiBoYW5kbGUgdGhvc2UuIFRoYXQncyBh IHNlcGFyYXRlIGNvbnZlcnNhdGlvbiwgYnV0IEkgbWlnaHQNCj4gPiB0YWtlIGEgbG9vayBhdCBh IHBhdGNoIGZvciBuZXh0IGNvbW1pdGZlc3QuDQo+IA0KPiBQbGVhc2UgZG8uDQoNCkRpZG4ndCBn ZXQgYXJvdW5kIHRvIGl0IGZvciBOb3ZlbWJlciwgYnV0IEknbSBwdXR0aW5nIHRoZSBmaW5pc2hp bmcNCnRvdWNoZXMgb24gdGhhdCBub3cuDQoNCldoaWxlIEkgd2FzIGxvb2tpbmcgYXQgdGhlIG5l dyBTQU4gY29kZSAoaW4gZmUtc2VjdXJlLW5zcy5jLA0KcGd0bHNfdmVyaWZ5X3BlZXJfbmFtZV9t YXRjaGVzX2NlcnRpZmljYXRlX2d1dHMoKSksIEkgbm90aWNlZCB0aGF0IGNvZGUNCmNvdmVyYWdl IG5ldmVyIHNlZW1lZCB0byB0b3VjaCBhIGdvb2QgY2h1bmsgb2YgaXQ6DQoNCj4gKyAgICAgICAg Zm9yIChjbiA9IHNhbl9saXN0OyBjbiAhPSBzYW5fbGlzdDsgY24gPSBDRVJUX0dldE5leHRHZW5l cmFsTmFtZShjbikpDQo+ICsgICAgICAgIHsNCj4gKyAgICAgICAgICAgIGNoYXIgICAgICAgKmFs dF9uYW1lOw0KPiArICAgICAgICAgICAgaW50ICAgICAgICAgcnY7DQo+ICsgICAgICAgICAgICBj aGFyICAgICAgICB0bXBbNTEyXTsNCg0KVGhhdCBsb29wIGNhbiBuZXZlciBleGVjdXRlLiBCdXQg SSB3b25kZXIgaWYgYWxsIG9mIHRoYXQgZXh0cmEgU0FOIGNvZGUNCnNob3VsZCBiZSByZW1vdmVk IGFueXdheT8gVGhlcmUncyB0aGlzIGNvbW1lbnQgYWJvdmUgaXQ6DQoNCj4gKwkvKg0KPiArCSAq IENFUlRfVmVyaWZ5Q2VydE5hbWUgd2lsbCBpbnRlcm5hbGx5IHBlcmZvcm0gUkZDIDI4MTggU3Vi amVjdEFsdE5hbWUNCj4gKwkgKiB2ZXJpZmljYXRpb24uDQo+ICsJICovDQoNCmFuZCBpdCBzZWVt cyBsaWtlIFNBTiB2ZXJpZmljYXRpb24gaXMgd29ya2luZyBpbiBteSB0ZXN0aW5nLCBkZXNwaXRl DQp0aGUgZGVhZCBsb29wLg0KDQotLUphY29iDQo=