Re: Support for NSS as a libpq TLS backend

Daniel Gustafsson <daniel@yesql.se>

View thread View on postgr.es

From: Daniel Gustafsson <daniel@yesql.se>

To: Postgres hackers <pgsql-hackers@lists.postgresql.org>

Cc: Stephen Frost <sfrost@snowman.net>

Date: 2020-07-03T11:51:28Z

Lists: pgsql-hackers

Attachments

0002-Make-pg_stat_ssl-reporting-backend-agnostic-v3.patch (application/octet-stream) patch v3-0002
0001-WIP-Support-libnss-for-as-TLS-backend-v3.patch (application/octet-stream) patch v3-0001

> On 25 Jun 2020, at 17:39, Daniel Gustafsson <daniel@yesql.se> wrote:
> 
>> On 15 May 2020, at 22:46, Daniel Gustafsson <daniel@yesql.se> wrote:
> 
>> The 0001 patch contains the full NSS support, and 0002 is a fix for the pgstat
>> abstraction which IMO leaks backend implementation details.  This needs to go
>> on it's own thread, but since 0001 fails without it I've included it here for
>> simplicity sake for now.
> 
> The attached 0001 and 0002 are the same patchseries as before, but with the
> OpenSSL test module fixed and a rebase on top of the current master.

Another rebase to resolve conflicts with the recent fixes in the SSL tests, as
well as some minor cleanup.

cheers ./daniel

Commits

Add tab-completion for CREATE FOREIGN TABLE.
- 74527c3e022d 15.0 cited
Add tap tests for the schema publications.
- 6b0f6f79eef2 15.0 cited
Move Perl test modules to a better namespace
- b3b4d8e68ae8 15.0 cited
Adjust configure to insist on Perl version >= 5.8.3.
- 92e6a98c3636 15.0 cited
Simplify code related to compilation of SSL and OpenSSL
- 092b785fad3d 14.0 landed
Introduce --with-ssl={openssl} as a configure option
- fe61df7f82aa 14.0 landed
Implement support for bulk inserts in postgres_fdw
- b663a4136331 14.0 cited
Fix redundant error messages in client tools
- 6be725e70161 14.0 cited
doc: Apply more consistently <productname> markup for OpenSSL
- 089da3c4778f 14.0 landed
Check ssl_in_use flag when reporting statistics
- 6a5c750f3f72 14.0 cited