From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id A424B753AE for ; Wed, 21 Apr 2021 14:19:31 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id A16E3EC81 for ; Wed, 21 Apr 2021 14:19:31 +0200 (CEST) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [94.136.29.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id C42F5EC77 for ; Wed, 21 Apr 2021 14:19:30 +0200 (CEST) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 9C4C045B8F for ; Wed, 21 Apr 2021 14:19:30 +0200 (CEST) Date: Wed, 21 Apr 2021 14:19:29 +0200 From: Wolfgang Bumiller To: Dominic =?utf-8?B?SsOkZ2Vy?= Cc: Proxmox Backup Server development discussion Message-ID: <20210421121929.n2q5yyzlgygc2kmc@wobu-vie.proxmox.com> References: <137355824.4295.1618915991154@webmail.proxmox.com> <20210421115618.GA87005@mala> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20210421115618.GA87005@mala> User-Agent: NeoMutt/20180716 X-SPAM-LEVEL: Spam detection results: 1 AWL -1.250 Adjusted score from AWL reputation of From: address KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [acme.sh, letsencrypt.org, dominicjaeger.com] URIBL_DBL_SPAM 2.5 Contains a spam URL listed in the Spamhaus DBL blocklist [dominicjaeger.com] Subject: Re: [pbs-devel] [RFC backup 00/23] Implements ACME suport for PBS X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Apr 2021 12:19:31 -0000 On Wed, Apr 21, 2021 at 01:56:18PM +0200, Dominic Jäger wrote: > I am not sure how much of what I noticed today is for this series or general > > On Tue, Apr 20, 2021 at 12:53:11PM +0200, Wolfgang Bumiller wrote: > > > In the window "Register Account" the textfield "Account Name" has the empty > > > text "default". As far as I know, we use empty texts for real default values. > > > So this should be removed and get a validator (already in the GUI) instead. > > > > GUI specifics aren't really in scope of this series as this just reuses the existing components. > > So this should be handled separately. > > or would be magically solved by the packaging changes > > > > Yeah we should turn the proxmox-acme repo into a split package and have the acme.sh > > wrapper separate so we can depend/suggest that without pulling in the perl code. > > but a few things looked working to me in PVE but not PBS: > > 1. In the "Create: Domain" window, when attempting to create a duplicate entry: > PVE shows an error "duplicate domain" while PBS silently replaces the previous > entry Sounds like a UI thing, can you also check PMG? PVE stores domains which use the standalone http challenge differently to PMG and PBS, so the UI modifies those in a different way which may be inconsistent. > 2. I installed libproxmox-acme-perl as disucssed. The dropdown list for DNS API > then did appear. However, I haven't found a dropdown entry yet that made the > general API Data field change to the API specific fields. This includes APIs > like kappernet for which this certainly works in PVE. The field schema is not available yet. This will come later. > 3. When trying around I got some error like > > TASK ERROR: validating challenge 'https://acme-staging-v02.api.letsencrypt.org/acme/...' failed - status: Invalid > and after editing (=removing a line) the contents of the API Data field the > error message became less useful > >Placing ACME order > >Order URL: https://acme-staging-v02.api.letsencrypt.org/acme/order/.... > >Getting authorization details from 'https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/...' > >The validation for dominicjaeger.com is pending > >Setting up validation plugin > >TASK ERROR: '/usr/share/proxmox-acme/proxmox-acme setup' exited with error (1) > > Would it be possible to show more reasons for the error here? Ah, via the API the command output probably doesn't make it into the task log. Should be able to pass that through, but what exactly you'll get from that is up to the actual plugin you're using. > > 4. The dropdown list is different for PBS and PVE. For example, PVE contains > "Cloudflare Managed DNS" while PBS contains just "cf" As with #2, that's just the detailed plugin schema not being available right now.