Support for NSS as TLS backend

Edit

Title

Topic

Security

Created

2020-06-10 14:02:27

Last modified

2021-04-08 08:16:35 (2 years, 2 months ago)

Latest email

2022-02-04 20:18:13 (1 year, 4 months ago)

Status

2021-03: Returned with feedback

2021-01: Moved to next CF

2020-11: Moved to next CF

2020-09: Moved to next CF

2020-07: Moved to next CF

Target version

Authors

Daniel Gustafsson (d_gustafsson)

Reviewers

Andres Freund (andresfreund), Jacob Champion (jchampion)Become reviewer

Committer

Links

Emails

Support for NSS as a libpq TLS backend: First at 2020-05-15 20:46:09 by Daniel Gustafsson <daniel at yesql.se>
Latest at 2022-02-04 20:18:13 by Daniel Gustafsson <daniel at yesql.se>
Latest attachment (v53-0011-NSS-experimental-support-for-NSS-in-CI.patch) at 2022-01-26 20:39:16 from Daniel Gustafsson <daniel at yesql.se>
    Attachment (v53-0011-NSS-experimental-support-for-NSS-in-CI.patch) at 2022-01-26 20:39:16 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (nss-repro.tar.gz) at 2022-01-26 18:25:37 from Jacob Champion <pchampion at vmware.com> (Patch: No)
    Attachment (v52-0011-NSS-experimental-support-for-NSS-in-CI.patch) at 2022-01-18 12:42:54 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v51-0011-NSS-experimental-support-for-NSS-in-CI.patch) at 2022-01-17 14:09:11 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v50-0010-nss-Build-infrastructure.patch) at 2021-12-15 22:10:14 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (Dockerfile) at 2021-11-25 13:39:29 from Joshua Brindle <joshua.brindle at crunchydata.com> (Patch: No)
    Attachment (v49-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-11-23 14:12:45 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (Dockerfile) at 2021-11-16 14:45:50 from Joshua Brindle <joshua.brindle at crunchydata.com> (Patch: No)
    Attachment (Dockerfile) at 2021-11-15 19:51:33 from Joshua Brindle <joshua.brindle at crunchydata.com> (Patch: No)
    Attachment (v48-0010-nss-Build-infrastructure.patch) at 2021-11-10 13:49:19 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v47-0010-nss-Build-infrastructure.patch) at 2021-11-05 10:01:18 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v46-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-10-29 11:54:29 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v45-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-10-05 13:08:18 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (since-v43.diff.txt) at 2021-10-04 16:14:37 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v44-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-09-30 12:17:29 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (since-v42.diff.txt) at 2021-09-27 19:40:28 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v42-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-09-20 09:38:16 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v41-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-09-08 18:49:33 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v40-0010-nss-Build-infrastructure.patch) at 2021-08-10 17:22:20 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v39-0010-nss-Build-infrastructure.patch) at 2021-07-26 13:26:16 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-nss-move-SSL_ClearSessionCache.patch) at 2021-07-19 19:33:23 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v38-0010-nss-Build-infrastructure.patch) at 2021-06-23 13:48:59 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-nss-don-t-ignore-failures-during-context-shutdown.patch.txt) at 2021-06-16 16:15:56 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (0001-nss-don-t-ignore-failures-during-context-shutdown.patch.txt) at 2021-06-15 23:50:14 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v37-0009-nss-Build-infrastructure.patch) at 2021-06-15 22:08:58 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (nss-fix-crldir.patch.txt) at 2021-06-14 22:15:47 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v36-0009-nss-Build-infrastructure.patch) at 2021-05-28 09:04:12 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v35-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-04-05 02:12:22 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v34-0009-nss-Build-infrastructure.patch) at 2021-04-04 22:13:43 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v33-0008-nss-Support-NSS-in-cryptohash.patch) at 2021-04-01 23:17:20 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v32-0009-nss-Build-infrastructure.patch) at 2021-03-25 23:22:33 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v31-0009-nss-Build-infrastructure.patch) at 2021-03-22 23:38:50 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v30-0001-nss-Support-libnss-as-TLS-library-in-libpq.patch) at 2021-03-03 08:52:13 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v29-0009-nss-Build-infrastructure.patch) at 2021-02-24 12:23:32 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v28-0009-nss-Build-infrastructure.patch) at 2021-02-22 13:31:13 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v27-0009-nss-Build-infrastructure.patch) at 2021-02-17 21:35:33 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v26-0010-nss-Build-infrastructure.patch) at 2021-02-08 23:08:37 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (since-v24.diff) at 2021-02-02 20:33:35 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v24-0006-NSS-cryptohash-support.patch) at 2021-02-01 20:49:20 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v23-0008-NSS-Make-the-cryptohash-NSSInitContext-static-as.patch) at 2021-01-29 12:57:02 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-Introduce-with-ssl-openssl-in-configure-options.patch) at 2021-01-27 07:39:23 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (since-v22.diff) at 2021-01-20 17:07:08 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v22-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2021-01-20 11:58:13 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v21-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2021-01-19 20:21:41 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v20-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2020-11-17 15:00:53 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (nss-fix-hang-when-hashing-certificates.patch) at 2020-11-16 20:00:47 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v19-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2020-11-13 12:14:58 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (nss-handle-timeouts-and-disconnections-in-pgtls_read.patch) at 2020-11-12 22:12:42 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (patch) at 2020-11-11 18:17:03 from Jacob Champion <pchampion at vmware.com> (Patch: Yes)
    Attachment (v18-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2020-11-06 23:11:15 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v17-0001-NSS-Frontend-Backend-and-build-infrastructure.patch) at 2020-11-04 13:09:52 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v16-0001-NSS-Frontend-Backend-and-build-infra.patch) at 2020-11-01 22:04:18 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v15-0001-NSS-Frontend-Backend-and-build-infra.patch) at 2020-10-29 15:20:19 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (v14-0001-NSS-Frontend-Backend-and-build-infra.patch) at 2020-10-28 10:56:26 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-Support-for-NSS-as-a-TLS-backend-v13.patch) at 2020-10-27 20:07:01 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-Support-for-NSS-as-a-TLS-backend-v12.patch) at 2020-10-20 12:24:24 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-Support-for-NSS-as-a-TLS-backend-v11.patch) at 2020-10-02 20:01:37 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-Support-for-NSS-as-a-TLS-backend-v10.patch) at 2020-09-17 09:41:28 from Daniel Gustafsson <daniel at yesql.se> (Patch: No)
    Attachment (0001-docs-consistent-markup-for-OpenSSL-and-SSL-v9.patch) at 2020-09-01 12:43:58 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend-v8.patch) at 2020-08-03 19:18:47 from Andrew Dunstan <andrew.dunstan at 2ndquadrant.com> (Patch: No)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend-v7.patch) at 2020-08-03 16:46:24 from Andrew Dunstan <andrew.dunstan at 2ndquadrant.com> (Patch: No)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend-v6.patch) at 2020-07-31 20:44:46 from Andrew Dunstan <andrew.dunstan at 2ndquadrant.com> (Patch: Yes)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend-v5.patch) at 2020-07-20 13:35:51 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend-v4.patch) at 2020-07-15 22:16:26 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0002-Make-pg_stat_ssl-reporting-backend-agnostic-v3.patch) at 2020-07-03 11:51:28 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0002-Make-pg_stat_ssl-reporting-backend-agnostic-v2.patch) at 2020-06-25 15:39:33 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)
    Attachment (0001-WIP-Support-libnss-for-as-TLS-backend.patch) at 2020-05-15 20:46:09 from Daniel Gustafsson <daniel at yesql.se> (Patch: Yes)

History

When	Who	What
2021-04-08 08:16:35	Michael Paquier (michael-kun)	Closed in commitfest 2021-03 with status: Returned with feedback
2021-02-22 14:42:51	Daniel Gustafsson (d_gustafsson)	New status: Needs review
2021-02-01 13:33:21	Masahiko Sawada (masahikosawada)	New status: Waiting on Author
2021-02-01 13:33:01	Masahiko Sawada (masahikosawada)	Closed in commitfest 2021-01 with status: Moved to next CF
2021-02-01 13:32:57	Masahiko Sawada (masahikosawada)	New status: Needs review
2021-01-18 06:33:40	Michael Paquier (michael-kun)	New status: Waiting on Author
2020-12-01 08:51:52	Georgios Kokolatos (gkokolatos)	Closed in commitfest 2020-11 with status: Moved to next CF
2020-11-10 14:25:51	Georgios Kokolatos (gkokolatos)	Changed reviewers to Andres Freund (andresfreund), Jacob Champion (jchampion)
2020-10-29 11:11:27	Georgios Kokolatos (gkokolatos)	Changed reviewers to Andres Freund (andresfreund)
2020-09-30 06:14:41	Michael Paquier (michael-kun)	Closed in commitfest 2020-09 with status: Moved to next CF
2020-09-30 06:14:38	Michael Paquier (michael-kun)	New status: Needs review
2020-09-29 05:58:44	Michael Paquier (michael-kun)	New status: Waiting on Author
2020-09-17 10:24:54	Daniel Gustafsson (d_gustafsson)	New status: Needs review
2020-09-17 07:41:38	Michael Paquier (michael-kun)	New status: Waiting on Author
2020-07-29 20:28:01	Daniel Gustafsson (d_gustafsson)	Closed in commitfest 2020-07 with status: Moved to next CF
2020-06-10 14:02:41	Daniel Gustafsson (d_gustafsson)	Changed authors to Daniel Gustafsson (d_gustafsson)
2020-06-10 14:02:27	Daniel Gustafsson (d_gustafsson)	Attached mail thread FAB21FC8-0F62-434F-AA78-6BD9336D630A@yesql.se
2020-06-10 14:02:27	Daniel Gustafsson (d_gustafsson)	Created patch record

Edit