[PATCH proxmox 1/1] fix #7948: acme: disable HTTP connection pooling

[Samuel Rufinatscha <s.rufinatscha@proxmox.com>]

Disable the connection pool for ACME to avoid reusing stale CA
connections.

Signed-off-by: Samuel Rufinatscha <s.rufinatscha@proxmox.com>
Link: https://bugzilla.proxmox.com/show_bug.cgi?id=7948
---
 proxmox-acme/src/async_client.rs  | 1 +
 proxmox-http/src/client/simple.rs | 9 +++++++--
 proxmox-http/src/http_options.rs  | 3 +++
 3 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/proxmox-acme/src/async_client.rs b/proxmox-acme/src/async_client.rs
index bba92023..f5b2b148 100644
--- a/proxmox-acme/src/async_client.rs
+++ b/proxmox-acme/src/async_client.rs
@@ -32,6 +32,7 @@ impl AcmeClient {
             proxy_config: None, // fixme???
             user_agent: Some(USER_AGENT_STRING.to_string()),
             tcp_keepalive: Some(TCP_KEEPALIVE_TIME),
+            pool_max_idle_per_host: Some(0),
         };
 
         let http_client = Client::with_options(options);
diff --git a/proxmox-http/src/client/simple.rs b/proxmox-http/src/client/simple.rs
index 0ea77768..3cc4e5a0 100644
--- a/proxmox-http/src/client/simple.rs
+++ b/proxmox-http/src/client/simple.rs
@@ -51,8 +51,13 @@ impl Client {
             https.set_proxy(proxy_config.clone());
         }
 
-        let client =
-            HyperClient::builder(TokioExecutor::new()).build::<HttpsConnector, Body>(https);
+        let mut builder = HyperClient::builder(TokioExecutor::new());
+
+        if let Some(max_idle) = options.pool_max_idle_per_host {
+            builder.pool_max_idle_per_host(max_idle);
+        }
+
+        let client = builder.build::<HttpsConnector, Body>(https);
         Self { client, options }
     }
 
diff --git a/proxmox-http/src/http_options.rs b/proxmox-http/src/http_options.rs
index 1124aa26..1ae7ec5b 100644
--- a/proxmox-http/src/http_options.rs
+++ b/proxmox-http/src/http_options.rs
@@ -9,6 +9,9 @@ pub struct HttpOptions {
     pub user_agent: Option<String>,
     /// TCP keepalive time, defaults to 7200
     pub tcp_keepalive: Option<u32>,
+    /// Maximum number of idle connections retained per host.
+    /// `None` uses the HTTP client default, `Some(0)` disables pooling.
+    pub pool_max_idle_per_host: Option<usize>,
 }
 
 impl HttpOptions {
-- 
2.47.3