From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id C5CF01FF13C for ; Thu, 25 Jun 2026 16:14:15 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 6C6391360E; Thu, 25 Jun 2026 16:14:14 +0200 (CEST) From: Manuel Federanko To: pbs-devel@lists.proxmox.com, pdm-devel@lists.proxmox.com Subject: [PATCH proxmox 4/7] acme: cert: add dedicated ari_id field to the certificate info. Date: Thu, 25 Jun 2026 16:13:34 +0200 Message-ID: <20260625141337.181684-5-m.federanko@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260625141337.181684-1-m.federanko@proxmox.com> References: <20260625141337.181684-1-m.federanko@proxmox.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 1 AWL -1.892 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy HEADER_FROM_DIFFERENT_DOMAINS 0.249 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods RCVD_IN_SBL_CSS 3.335 Received via a relay in Spamhaus SBL-CSS RDNS_NONE 0.793 Delivered to internal network by a host with no rDNS SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [types.rs] Message-ID-Hash: 6OEX24CMM2B5X2NB64DEC32IWUBPNPQ4 X-Message-ID-Hash: 6OEX24CMM2B5X2NB64DEC32IWUBPNPQ4 X-MailFrom: mfederanko@dev.localdomain X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox Backup Server development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is used often enough in the ARI implementation to warrant it's own field. With that we don't have to create separate x509 instances and carry them around just for that. Signed-off-by: Manuel Federanko --- proxmox-acme-api/src/certificate_helpers.rs | 3 +++ proxmox-acme-api/src/types.rs | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/proxmox-acme-api/src/certificate_helpers.rs b/proxmox-acme-api/src/certificate_helpers.rs index 5d35f86a..e7a2a16d 100644 --- a/proxmox-acme-api/src/certificate_helpers.rs +++ b/proxmox-acme-api/src/certificate_helpers.rs @@ -396,6 +396,8 @@ impl CertificateInfo { }) .unwrap_or_default(); + let ari_id = compute_ari_certificate_id(&x509); + Ok(CertificateInfo { filename: filename.to_string(), pem: Some(cert_pem), @@ -407,6 +409,7 @@ impl CertificateInfo { notafter: asn1_time_to_unix(x509.not_after()).ok(), public_key_type, san, + ari_id, }) } diff --git a/proxmox-acme-api/src/types.rs b/proxmox-acme-api/src/types.rs index 934e6ece..00cd353d 100644 --- a/proxmox-acme-api/src/types.rs +++ b/proxmox-acme-api/src/types.rs @@ -60,6 +60,10 @@ pub struct CertificateInfo { /// The SSL Fingerprint. #[serde(skip_serializing_if = "Option::is_none")] pub fingerprint: Option, + + /// The ARI ID of this certificate + #[serde(skip_serializing_if = "Option::is_none")] + pub ari_id: Option, } proxmox_schema::api_string_type! { -- 2.47.3