From: Samuel Rufinatscha <s.rufinatscha@proxmox.com>
To: "Fabian Grünbichler" <f.gruenbichler@proxmox.com>,
"Proxmox Backup Server development discussion"
<pbs-devel@lists.proxmox.com>
Subject: Re: [pbs-devel] [PATCH proxmox-backup v5 3/5] acme: drop local AcmeClient
Date: Wed, 14 Jan 2026 11:52:15 +0100 [thread overview]
Message-ID: <9948e8a5-1ee9-4107-8711-51c29683a2b8@proxmox.com> (raw)
In-Reply-To: <1768384620.lpeqde0dyn.astroid@yuna.none>
On 1/14/26 10:57 AM, Fabian Grünbichler wrote:
> On January 14, 2026 9:56 am, Samuel Rufinatscha wrote:
>> On 1/13/26 2:44 PM, Fabian Grünbichler wrote:
>>> On January 8, 2026 12:26 pm, Samuel Rufinatscha wrote:
>>>> PBS currently uses its own ACME client and API logic, while PDM uses the
>>>> factored out proxmox-acme and proxmox-acme-api crates. This duplication
>>>> risks differences in behaviour and requires ACME maintenance in two
>>>> places. This patch is part of a series to move PBS over to the shared
>>>> ACME stack.
>>>>
>>>> Changes:
>>>> - Remove the local src/acme/client.rs and switch to
>>>> proxmox_acme::async_client::AcmeClient where needed.
>>>> - Use proxmox_acme_api::load_client_with_account to the custom
>>>> AcmeClient::load() function
>>>> - Replace the local do_register() logic with
>>>> proxmox_acme_api::register_account, to further ensure accounts are persisted
>>>> - Replace the local AcmeAccountName type, required for
>>>> proxmox_acme_api::register_account
>>>>
>>>> Signed-off-by: Samuel Rufinatscha <s.rufinatscha@proxmox.com>
>>>> ---
>>>> src/acme/client.rs | 691 -------------------------
>>>> src/acme/mod.rs | 3 -
>>>> src/acme/plugin.rs | 2 +-
>>>> src/api2/config/acme.rs | 50 +-
>>>> src/api2/node/certificates.rs | 2 +-
>>>> src/api2/types/acme.rs | 8 -
>>>> src/bin/proxmox_backup_manager/acme.rs | 17 +-
>>>> src/config/acme/mod.rs | 8 +-
>>>> src/config/node.rs | 9 +-
>>>> 9 files changed, 36 insertions(+), 754 deletions(-)
>>>> delete mode 100644 src/acme/client.rs
>>>>
>>>
>>> [..]
>>>
>>>> diff --git a/src/config/acme/mod.rs b/src/config/acme/mod.rs
>>>> index ac89ae5e..e4639c53 100644
>>>> --- a/src/config/acme/mod.rs
>>>> +++ b/src/config/acme/mod.rs
>>>
>>> I think this whole file should probably be replaced entirely by
>>> proxmox-acme-api , which - AFAICT - would just require adding the
>>> completion helpers there?
>>>
>>
>> Good point, yes I think moving the completion helpers would
>> allow us to get rid of this file. PDM does not make use of
>> them / there is atm no 1:1 code in proxmox/ for these helpers.
>
> only because https://bugzilla.proxmox.com/show_bug.cgi?id=7179 is not
> yet implemented ;) so please coordinate with Shan to avoid doing the
> work twice.
Ah, good catch! thanks for the reference @Fabian.
@Shan: since #7179 will likely touch the same area, it probably makes
sense to factor out the required helpers as part of this series
to avoid duplicate work. If that works for you, maybe hold off on
parallel changes here until this lands. What do you think?
_______________________________________________
pbs-devel mailing list
pbs-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel
next prev parent reply other threads:[~2026-01-14 10:52 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-08 11:26 [pbs-devel] [PATCH proxmox{, -backup} v5 0/9] fix #6939: acme: support servers returning 204 for nonce requests Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox v5 1/4] acme: reduce visibility of Request type Samuel Rufinatscha
2026-01-13 13:46 ` Fabian Grünbichler
2026-01-14 15:07 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox v5 2/4] acme: introduce http_status module Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-14 10:29 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox v5 3/4] fix #6939: acme: support servers returning 204 for nonce requests Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox v5 4/4] acme-api: add helper to load client for an account Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-13 16:57 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox-backup v5 1/5] acme: clean up ACME-related imports Samuel Rufinatscha
2026-01-13 13:45 ` [pbs-devel] applied: " Fabian Grünbichler
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox-backup v5 2/5] acme: include proxmox-acme-api dependency Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-13 16:41 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox-backup v5 3/5] acme: drop local AcmeClient Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-14 8:56 ` Samuel Rufinatscha
2026-01-14 9:58 ` Fabian Grünbichler
2026-01-14 10:52 ` Samuel Rufinatscha [this message]
2026-01-14 16:41 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox-backup v5 4/5] acme: change API impls to use proxmox-acme-api handlers Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-13 16:53 ` Samuel Rufinatscha
2026-01-08 11:26 ` [pbs-devel] [PATCH proxmox-backup v5 5/5] acme: certificate ordering through proxmox-acme-api Samuel Rufinatscha
2026-01-13 13:45 ` Fabian Grünbichler
2026-01-13 16:51 ` Samuel Rufinatscha
2026-01-13 13:48 ` [pbs-devel] [PATCH proxmox{, -backup} v5 0/9] fix #6939: acme: support servers returning 204 for nonce requests Fabian Grünbichler
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9948e8a5-1ee9-4107-8711-51c29683a2b8@proxmox.com \
--to=s.rufinatscha@proxmox.com \
--cc=f.gruenbichler@proxmox.com \
--cc=pbs-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.