Re: Support for NSS as a libpq TLS backend

From: Jacob Champion <pchampion(at)vmware(dot)com>
To: "daniel(at)yesql(dot)se" <daniel(at)yesql(dot)se>
Cc: "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>, "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "andrew(dot)dunstan(at)2ndquadrant(dot)com" <andrew(dot)dunstan(at)2ndquadrant(dot)com>, "sfrost(at)snowman(dot)net" <sfrost(at)snowman(dot)net>, "thomas(dot)munro(at)gmail(dot)com" <thomas(dot)munro(at)gmail(dot)com>, "michael(at)paquier(dot)xyz" <michael(at)paquier(dot)xyz>, "andres(at)anarazel(dot)de" <andres(at)anarazel(dot)de>
Subject: Re: Support for NSS as a libpq TLS backend
Date: 2021-09-27 19:40:28
Message-ID: 9386e844170e1e8294611a276970d6b1786812a7.camel@vmware.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, 2021-09-27 at 16:29 +0000, Jacob Champion wrote:
> On Mon, 2021-09-27 at 15:44 +0200, Daniel Gustafsson wrote:
> >
> > Feel free to post a new version of the NSS patch with these changes if you want.
>
> Will do!

Something like the attached, v43, I think. (since-v42.diff.txt has the
changes only.)

This fixes the interaction of IP addresses and SNI for me, and honors
sslsni=0.

--Jacob

Attachment Content-Type Size
since-v42.diff.txt text/plain 2.5 KB
v43-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch text/x-patch 102.6 KB
v43-0002-Refactor-SSL-testharness-for-multiple-library.patch text/x-patch 11.5 KB
v43-0003-nss-Add-NSS-specific-tests.patch text/x-patch 57.8 KB
v43-0004-test-check-for-empty-stderr-during-connect_ok.patch text/x-patch 3.6 KB
v43-0005-nss-pg_strong_random-support.patch text/x-patch 2.0 KB
v43-0006-nss-Documentation.patch text/x-patch 35.3 KB
v43-0007-nss-Support-NSS-in-pgcrypto.patch text/x-patch 24.9 KB
v43-0008-nss-Support-NSS-in-sslinfo.patch text/x-patch 3.6 KB
v43-0009-nss-Support-NSS-in-cryptohash.patch text/x-patch 6.1 KB
v43-0010-nss-Build-infrastructure.patch text/x-patch 21.4 KB

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2021-09-27 19:40:39 Re: statement_timeout vs DECLARE CURSOR
Previous Message Melanie Plageman 2021-09-27 18:58:53 Re: pg_stat_bgwriter.buffers_backend is pretty meaningless (and more?)