[PATCH proxmox{,-backup} 0/2] fix #7948: acme: disable connection pooling for certificate renewal

[Samuel Rufinatscha <s.rufinatscha@proxmox.com>]

ACME certificate renewal can fail [0] after an order has been finalized
if the CA closes the HTTP/1.1 connection during the polling delay.
Reusing that stale connection then causes the task to fail with:

"TASK ERROR: client error (SendRequest)"

Makes the maximum number of idle connections configurable in the shared
HTTP client and disables connection pooling for ACME requests.

Testing:

The issue was reproduced using Pebble and a proxy which drops a reused
connection after order finalization. The unpatched PBS build failed with
SendRequest, while the patched build opened a new connection for the
subsequent poll and completed certificate issuance successfully.

Notes for the maintainer:

* adds a public field to HttpOptions
* both PBS and PDM require the updated crates

[0] https://bugzilla.proxmox.com/show_bug.cgi?id=7948

proxmox:

Samuel Rufinatscha (1):
  fix #7948: acme: disable HTTP connection pooling

 proxmox-acme/src/async_client.rs  | 1 +
 proxmox-http/src/client/simple.rs | 9 +++++++--
 proxmox-http/src/http_options.rs  | 3 +++
 3 files changed, 11 insertions(+), 2 deletions(-)


proxmox-backup:

Samuel Rufinatscha (1):
  http: adapt to new pool_max_idle_per_host option

 src/api2/node/subscription.rs | 1 +
 src/tools/mod.rs              | 1 +
 2 files changed, 2 insertions(+)


Summary over all repositories:
  5 files changed, 13 insertions(+), 2 deletions(-)

-- 
Generated by git-murpp 0.8.1