Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jzE-0002C2-5p for pgsql-hackers@arkaria.postgresql.org; Tue, 02 Feb 2021 00:56:08 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l6jzB-00019e-Ox for pgsql-hackers@arkaria.postgresql.org; Tue, 02 Feb 2021 00:56:05 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jzB-00019W-HB for pgsql-hackers@lists.postgresql.org; Tue, 02 Feb 2021 00:56:05 +0000 Received: from mail-co1nam11on2050.outbound.protection.outlook.com ([40.107.220.50] helo=NAM11-CO1-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l6jz7-0002rh-UJ for pgsql-hackers@lists.postgresql.org; Tue, 02 Feb 2021 00:56:04 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YANcIwC40JYv73h/353qRL4lBmxH0Sz5AO5bs35QevVc5lh6cXaTojhxPL4zKq8hgDYYxWSP9WMMC0j1HbH16jPQWTQ2lSyS5SVx7iY7+yXEeqTArBN+OTnqGqT5nonP7JcL5umQV7fF7IlXT17loFjojTpgjdW8BcWdbrmG4NJ40JlDr2tMVABgFWxv0AfehBqCXj/8OfZ8un/v0Ag3p/8VfkyfJ9TlkcKkACHorTWDwFlDxE8o7QVGNq6FC3WI9k7+q5MstZ8t2rYu+jSGUVHbvVT+KzZTJG7+Bh46h14Dn8pb9sCwOhqA1qN4kGQLhYSmiOSXBqeyDayCCcLEkQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jHhnHvrmBynPoXnrciO7NK16VSQ+NG3W2lT2p2XoJKI=; b=glIlaeheylK8WcBHp9CILYpYkQJOPl5bNg0ib5FtOyM5gV0Qfoj1RdwXrFYFPMGn19tr0ZrhBUOjFVMr3QuVLEmxAqLQNG0P4AEGhgAW+cIXEnurg+k5segaImmgkKHjanneVN+j941CqRwjhzcsCA9oHZA844r+ujG9nCtXt+hLNn8zRxvAFEym9CpBgjpISDqWb78ENL6mUW1sOTEXsrlRvFdr1Xh9kLv1+B4H3UM5NfHWj3ST2IzYJo+BpLZYM+lHfWy2+oCFhLVMh9jgj+K2shBze8lDQdfsV2qCVMk3nw7aHiJVg0CZz3QU4w8ypzljVqwJSNQSyMQs0dohtA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=vmware.com; dmarc=pass action=none header.from=vmware.com; dkim=pass header.d=vmware.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vmware.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jHhnHvrmBynPoXnrciO7NK16VSQ+NG3W2lT2p2XoJKI=; b=uoBLn31WA/xrAmxAUJpjh6H11uXgcWpRjir8zhFp2GEqfkte7MHkESzdOEMho7bYN28Crh40XGM+OsfPbmoyBkZkEDmqzFf1tfR6xLQepW4RlbkIZ+T2pxqelCsQNuHVov9SuARKTVgupbi733awjtGjuwqvuh6XZXr4w8FzVIM= Received: from (2603:10b6:300:65::20) by MWHPR0501MB3738.namprd05.prod.outlook.com (2603:10b6:301:7d::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.8; Tue, 2 Feb 2021 00:55:57 +0000 Received: from MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620]) by MWHPR05MB2896.namprd05.prod.outlook.com ([fe80::408b:a41e:e514:6620%9]) with mapi id 15.20.3825.017; Tue, 2 Feb 2021 00:55:57 +0000 From: Jacob Champion To: "daniel@yesql.se" CC: "hlinnaka@iki.fi" , "pgsql-hackers@lists.postgresql.org" , "andrew.dunstan@2ndquadrant.com" , "andres@anarazel.de" , "thomas.munro@gmail.com" , "sfrost@snowman.net" , "michael@paquier.xyz" Subject: Re: Support for NSS as a libpq TLS backend Thread-Topic: Support for NSS as a libpq TLS backend Thread-Index: AQHWM1w61GrKUIsl6UCBcYrYNRBt46kJRsIAgAA+PQCAGQsiAIAEdGUAgAAqk4CAAbpsAIABgI0AgCnqVACAA5UBgIAAY+MAgBTX7ACAACGAAIASngCAgAAfeICABYLFgIAbyjgAgABy24CACw63gIAAAzWAgAwa5QCAA6HPgIAAKuGAgAYXDoCAACZBAIABTCSAgAALLgCAAcj/gIAA61UAgAU5IwCAAT6LgIBg7KEAgAJv4YCAAEgzAIAAvXeAgABWToCAExoQAIAAROWA Date: Tue, 2 Feb 2021 00:55:57 +0000 Message-ID: References: <0E64F3CB-4731-4FA8-82D8-D8590086654C@vmware.com> <1B0B31E4-AD37-475C-9374-7E24AA808479@vmware.com> <5C27CF6F-5BD3-4639-AAA6-73465595B6DF@vmware.com> <7B5A88DF-863A-4B00-B841-0285C1FF70DF@yesql.se> <5F24348B-10BA-4AA1-999B-1E2AB22B4997@vmware.com> <94E22878-6289-43D5-A674-804F6CB23782@yesql.se> <8D7F95DB-8F8A-4300-BFDA-656FBAB30FE2@yesql.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: yesql.se; dkim=none (message not signed) header.d=none;yesql.se; dmarc=none action=none header.from=vmware.com; x-originating-ip: [50.39.198.229] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d0300403-521b-4f9b-de0e-08d8c7154d31 x-ms-traffictypediagnostic: MWHPR0501MB3738: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1923; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR05MB2896.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(39860400002)(396003)(346002)(136003)(376002)(366004)(86362001)(4744005)(4326008)(478600001)(8676002)(2906002)(36756003)(6506007)(186003)(26005)(316002)(2616005)(66476007)(6486002)(76116006)(8936002)(66556008)(64756008)(66446008)(6512007)(6916009)(66946007)(5660300002)(54906003)(71200400001)(83380400001);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?dXh4aVdHMXNMZ3VMVnNVVUVpZGNJblE2cStVZ2hLc0ZUWHUzTXhHTnBqZ0s3?= =?utf-8?B?YUJMaW01UnJDbmhXV2laMzJIeGhjQTRaNGtkT085K1h4SXNrUXJxRHZOMXZM?= =?utf-8?B?L0VJQWVuSTF2NHN2dDI4NENJZnJKN1llVTh6Q3RwVk5Sd3RadGs5bDBjVW9B?= =?utf-8?B?NUpNWE8yZlZ1SEZxbThwNnJVeFc2VHBnQlN0NmxXTnpXb2V2czZFTHM3VlU2?= =?utf-8?B?aWh2djc2aXhEMk9VLzUvY1VlYk05M3ovZS9EaTE5ZmJ4ZHNaSFY3NU50NkY0?= =?utf-8?B?ejFmOTdKb2s0UFRRREpTellEVmVOVmRUUnZwdHdnTE1qcU41a1hHYnFVQ0pK?= =?utf-8?B?ZDByWnJLMmhHclBibnJNZWIzM1o2TFpuaTg1L3dwUm9zeFFUVWt6bXNQR21q?= =?utf-8?B?M2d6LzR2ekJoVXlkWWlreVI3VGUzb1dIMmRKemk5azVCMWYyMW94ZDAvc3pL?= =?utf-8?B?N3lFaFRVdVo1NzJENG1NSERFOVZsWE1PQTVEb0ZQOHBnSGR1V0o4MDJxWE0y?= =?utf-8?B?dnZvYTVqeHBxNWdITU5MSTVWL21Xem1yV2VweUdYc2NHcVVJU2pFRkxuVEZ0?= =?utf-8?B?WENnTEIrNzlPVWtNUFNOTG1ZWlozY01rNkpCYTdBL2FIa21rK0hyNGd3eUU5?= =?utf-8?B?R2liUHRqYnRRWUVDcnlwZU5jMEZtNHdTaGVNV1F2SzVVcXVDY2dRaVpONWNn?= =?utf-8?B?LzBHRVUwTkZadG4xbk80dnZoZ2NwM1QzMXk2NkxwMDBvbDVnemd5OUNnSkFk?= =?utf-8?B?LzMvUUxNVkkwbzdneGQ4bXpsdGxnSnp3SSt6RFdnNGY4MlM1QlFxWFdsMzIv?= =?utf-8?B?NjNJbEFqcEtvSHBnRFRyanhGTW1GZklmRm1lMCtudllYVTFpK3dQNEFybDdY?= =?utf-8?B?QnBuaEc5VjA5cm5GZktRWFNTQitFN0FSZHZsd3Jic0Z5RC9uYm5nbkRzMlVp?= =?utf-8?B?WFlMekZmQWJ0cDg2cnBBc2oxQ0J3QU41eDVrQ1VKMjVoNnRvUFpOaDZZM1lH?= =?utf-8?B?MDFHaFZaUldzZmVxUU9POFg0dHZSMHpiV0NoZjIrRk0zdjB3bks0azJOTWdX?= =?utf-8?B?WmI0Q0NWU2NsalcvUGV2NG9rL1ZFdVR0RjNVcTVtajVPMjUyb2FTbTRldFJJ?= =?utf-8?B?RFh6N3ZrMDkzQklzUmM4UEEyNnZuTysvRHQ1TFUwSkJhZ3Zoa1I3Rm9jYndo?= =?utf-8?B?YUllUVBHRUxNVWd3bXdwazlxUHBFMXE3bDNQdWNwRjI4RFB3OGwva2dEZzhh?= =?utf-8?B?QytITmF6MWFHMTQrUHBzdWp6a2lrSUlQUHN5blFHVmJ2WXY2V2N2dkFWZWJU?= =?utf-8?B?Y1p4Q0UxTkZsUTh5M0NQbG1tYVJ4Z2pzUGhvUE5CSjlMRmlidSttOUNONEVK?= =?utf-8?B?N0VIY3dxckpaMlpQUVUySkxPSEQyclV4WHdXeXErN3VONW5LYWI0L1dPbUIw?= =?utf-8?B?NlFpa1lWTzZLUXk1dC9rS0xIM3ZXN2lVZnZhM0Z3PT0=?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <253DC34C6DB6FA4BB15D7083C66DECF1@namprd05.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: vmware.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB2896.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d0300403-521b-4f9b-de0e-08d8c7154d31 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Feb 2021 00:55:57.4950 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +SCenvKLmZCxKqj1jags5rmWkXZAdYCxrx7QtrTaIUyLBm/GIkbTanB80J3WSJNme3D9Ts39LZAN6shfEWAVmQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR0501MB3738 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gTW9uLCAyMDIxLTAyLTAxIGF0IDIxOjQ5ICswMTAwLCBEYW5pZWwgR3VzdGFmc3NvbiB3cm90 ZToNCj4gPiBFbWJlZGRlZCBOVUxMcyBhcmUgbm93IGhhbmRsZWQgaW4gYSBzaW1pbGFyIG1hbm5l ciB0byB0aGUgT3BlblNTTCBzaWRlLA0KPiA+IHRob3VnaCBiZWNhdXNlIHRoaXMgZmFpbHVyZSBo YXBwZW5zIGR1cmluZyB0aGUgY2VydGlmaWNhdGUNCj4gPiBhdXRoZW50aWNhdGlvbiBjYWxsYmFj aywgaXQgcmVzdWx0cyBpbiBhIFRMUyBhbGVydCByYXRoZXIgdGhhbiBzaW1wbHkNCj4gPiBjbG9z aW5nIHRoZSBjb25uZWN0aW9uLg0KPiANCj4gQnV0IHJldHVybmluZyBTRUNGYWlsdXJlIGZyb20g dGhlIGNlcnQgY2FsbGJhY2sgZm9yY2UgTlNTIHRvIHRlcm1pbmF0ZSB0aGUNCj4gY29ubmVjdGlv biBpbW1lZGlhdGVseSBkb2Vzbid0IGl0Pw0KDQpJSVJDIE5TUyB3aWxsIHNlbmQgdGhlIGFsZXJ0 IGZpcnN0LCB3aGVyZWFzIG91ciBPcGVuU1NMIGltcGxlbWVudGF0aW9uDQp3aWxsIGNvbXBsZXRl IHRoZSBoYW5kc2hha2UgYW5kIHRoZW4gZHJvcCB0aGUgY29ubmVjdGlvbi4gSSdsbCByZWJ1aWxk DQp3aXRoIHRoZSBsYXRlc3QgYW5kIGNvbmZpcm0uDQoNCj4gPiBGb3IgZWFzaWVyIHJldmlldyBv ZiBqdXN0IHRoZSBwYXJ0cyBJJ3ZlIGNoYW5nZWQsIEkndmUgYWxzbyBhdHRhY2hlZCBhDQo+ID4g c2luY2UtdjIyLmRpZmYsIHdoaWNoIGlzIHBhcnQgb2YgdGhlIDAwMDEgcGF0Y2guDQo+IA0KPiBJ IGNvbmZ1c2VkIG15IGRldiB0cmVlcyBhbmQgbWlzc2VkIHRvIGluY2x1ZGUgdGhpcyBpbiB0aGUg djIzIHRoYXQgSSBzZW50IG91dA0KPiAod2hpY2ggc2hvdWxkJ3ZlIGJlZW4gdjI0KSwgc29ycnkg YWJvdXQgdGhhdC4gIEF0dGFjaGVkIGlzIGEgdjI0IHdoaWNoIGlzDQo+IHJlYmFzZWQgb24gdG9w IG9mIHRvZGF5cyAtLXdpdGgtc3NsIGNvbW1pdCwgYW5kIG5vdyBpbmNsdWRlcyB5b3VyIGNoYW5n ZXMuDQoNCk5vIHByb2JsZW0uIFRoYW5rcyENCg0KLS1KYWNvYg0K