From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 58FCE1FF17A for ; Tue, 28 Oct 2025 20:33:41 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E94BE2185A; Tue, 28 Oct 2025 20:34:12 +0100 (CET) From: Samuel Rufinatscha To: pbs-devel@lists.proxmox.com Date: Tue, 28 Oct 2025 16:21:59 +0100 Message-ID: <20251028152201.216603-1-s.rufinatscha@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1761664918493 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.074 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment POISEN_SPAM_PILL 0.1 Meta: its spam POISEN_SPAM_PILL_1 0.1 random spam to be learned in bayes POISEN_SPAM_PILL_3 0.1 random spam to be learned in bayes SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record X-Mailman-Approved-At: Tue, 28 Oct 2025 20:34:12 +0100 Subject: [pbs-devel] [PATCH proxmox{, -backup} 0/2] fix #6939: acme: support servers returning 204 for nonce requests X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" SGksCgp0aGlzIHNlcmllcyBwcm9wb3NlcyBhIGNoYW5nZSB0byBBQ01FIGFjY291bnQgcmVnaXN0 cmF0aW9uIGluIFByb3htb3gKQmFja3VwIFNlcnZlciAoUEJTKSwgc28gdGhhdCBpdCBhbHNvIHdv cmtzIHdpdGggQUNNRSBzZXJ2ZXJzIHRoYXQgcmV0dXJuCkhUVFAgMjA0IE5vIENvbnRlbnQgdG8g dGhlIEhFQUQgcmVxdWVzdCBmb3IgbmV3Tm9uY2UuCgpUaGlzIGJlaGF2aW91ciB3YXMgb2JzZXJ2 ZWQgYWdhaW5zdCBhIHNwZWNpZmljIEFDTUUgZGVwbG95bWVudCBhbmQKcmVwb3J0ZWQgYXMgYnVn ICM2OTM5IFsxXS4gQ3VycmVudGx5LCBQQlMgY2Fubm90IHJlZ2lzdGVyIGFuIEFDTUUKYWNjb3Vu dCBmb3IgdGhpcyBDQS4KCiMjIFByb2JsZW0KCkR1cmluZyBBQ01FIGFjY291bnQgcmVnaXN0cmF0 aW9uLCBQQlMgZmlyc3QgZmV0Y2hlcyBhbiBhbnRpLXJlcGxheSBub25jZQpieSBzZW5kaW5nIGEg SEVBRCByZXF1ZXN0IHRvIHRoZSBDQeKAmXMgbmV3Tm9uY2UgVVJMLiBSRkMgODU1NSA3LjIgWzJd CnNheXM6CgoqIHRoZSBzZXJ2ZXIgTVVTVCBpbmNsdWRlIGEgUmVwbGF5LU5vbmNlIGhlYWRlciB3 aXRoIGEgZnJlc2ggbm9uY2UsCiogdGhlIHNlcnZlciBTSE9VTEQgdXNlIHN0YXR1cyAyMDAgT0sg Zm9yIHRoZSBIRUFEIHJlcXVlc3QsCiogdGhlIHNlcnZlciBNVVNUIGFsc28gaGFuZGxlIEdFVCBv biB0aGUgc2FtZSByZXNvdXJjZSB3aXRoIHN0YXR1cyAyMDQgTm8KICBDb250ZW50IGFuZCBhbiBl bXB0eSBib2R5IFsyXS4KCkN1cnJlbnRseSwgb3VyIFJ1c3QgQUNNRSBjbGllbnRzIG9ubHkgYWNj ZXB0IDIwMCBPSy4gUEJTIGluaGVyaXRzIHRoYXQKc3RyaWN0bmVzcyBhbmQgYWJvcnRzIHdpdGg6 CgoqQUNNRSBzZXJ2ZXIgcmVzcG9uZGVkIHdpdGggdW5leHBlY3RlZCBzdGF0dXMgY29kZTogMjA0 KgoKVGhpcyBpcyBhbHNvIHN0cmljdGVyIHRoYW4gdGhlIFBWRSBQZXJsIEFDTUUgY2xpZW50LCB3 aGljaCB0b2xlcmF0ZXMgYW55CjJ4eCBzdWNjZXNzIGNvZGVzIFszXS4gVGhlIGF1dGhvciBtZW50 aW9ucywgdGhlIGlzc3VlIGRpZCBub3QgYXBwZWFyCndpdGggUFZFOSBbMV0uCgojIyBJZGVhcyB0 byBzb2x2ZSB0aGUgcHJvYmxlbQoKVG8gc3VwcG9ydCBBQ01FIHByb3ZpZGVycyB3aGljaCByZXR1 cm4gMjA0IE5vIENvbnRlbnQsIHRoZSB1bmRlcmx5aW5nCkFDTUUgY2xpZW50cyBuZWVkIHRvIHRv bGVyYXRlIGJvdGggMjAwIE9LIGFuZCAyMDQgTm8gQ29udGVudCBhcyB2YWxpZApyZXNwb25zZXMg Zm9yIHRoZSBub25jZSBIRUFEIHJlcXVlc3QsIGFzIGxvbmcgYXMgdGhlIFJlcGxheS1Ob25jZSBp cwpwcm92aWRlZC4KCkkgY29uc2lkZXJlZCBmb2xsb3dpbmcgc29sdXRpb25zOgoKMS4gQ2hhbmdl IHRoZSBgZXhwZWN0ZWRgIGZpZWxkIG9mIHRoZSBgQWNtZVJlcXVlc3RgIHR5cGUgZnJvbSBgdTE2 YCB0bwogICBgVmVjPHUxNj5gLCB0byBzdXBwb3J0IG11bHRpcGxlIHN1Y2Nlc3MgY29kZXMKCjIu IEtlZXAgYGV4cGVjdGVkOiB1MTZgIGFuZCBhZGQgYSBzZWNvbmQgZmllbGQgZS5nLiBgZXhwZWN0 ZWRfb3RoZXI6CiAgIFZlYzx1MTY+YCBmb3IgImFsc28gYWxsb3dlZCIgY29kZXMuCgozLiBTdXBw b3J0IGFueSAyeHggc3VjY2VzcyBjb2RlcywgYW5kIHJlbW92ZSB0aGUgYGV4cGVjdGVkYCBjaGVj awoKSSB0aG91Z2h0ICgxKSBtaWdodCBiZSByZWFzb25hYmxlLCBiZWNhdXNlOgoKKiBJdCBzdGF5 cyBleHBsaWNpdCBhbmQgbWFrZXMgaXQgY2xlYXIgd2hpY2ggc3RhdHVzZXMgYXJlIGNvbnNpZGVy ZWQKICBzdWNjZXNzLgoqIFdlIGRvbuKAmXQgY3JlYXRlIHR3byBwYXJhbGxlbCBjb25jZXB0cyAo ImV4cGVjdGVkIiB2cwogICJleHBlY3RlZF9vdGhlciIpIHdoaWNoIGludHJvZHVjZXMgYWRkaXRp b25hbCBjb21wbGV4aXR5CiogQ2FuIGJlIGV4dGVuZCBsYXRlciBpZiB3ZSBtZWV0IHlldCBhbm90 aGVyIGhhcm1sZXNzIGJ1dCBub3QgMjAwCiAgdmFyaWFudC4KKiBXZSBkb27igJl0IGFsbG93IGFy Yml0cmFyeSAyeHguCgpXaGF0IGRvIHlvdSB0aGluaz8gRG8geW91IG1heWJlIGhhdmUgYW55IG90 aGVyIHNvbHV0aW9uIGluIG1pbmQgdGhhdAp3b3VsZCBmaXQgYmV0dGVyPwoKIyMgVGVzdGluZwoK VG8gcHJvdmUgdGhlIHByb3Bvc2VkIGZpeCwgSSByZXByb2R1Y2VkIHRoZSBzY2VuYXJpbzoKClBl YmJsZSAocmVsZWFzZSAyLjguMCkgZnJvbSBMZXQncyBFbmNyeXB0IFs1XSBydW5uaW5nIG9uIGEg RGViaWFuIDkgVk0KYXMgdGhlIEFDTUUgc2VydmVyLiBuZ2lueCBpbiBmcm9udCBvZiBQZWJibGUs IHRvIGludGVyY2VwdCB0aGUKYG5ld05vbmNlYCByZXF1ZXN0IGluIG9yZGVyIHRvIHJldHVybiAy MDQgTm8gQ29udGVudCBpbnN0ZWFkIG9mIDIwMCBPSywKYWxsIG90aGVyIHJlcXVlc3RzIGFyZSB1 bmNoYW5nZWQgYW5kIGZvcndhcmRlZCB0byBQZWJibGUuIFRydXN0IHRoZQpQZWJibGUgYW5kIG5n aXggQ0FzIHZpYSBgL3Vzci9sb2NhbC9zaGFyZS9jYS1jZXJ0aWZpY2F0ZXNgICsKYHVwZGF0ZS1j YS1jZXJ0aWZpY2F0ZXNgIG9uIHRoZSBQQlMgVk0uCgpUaGVuIEkgcmFuIGZvbGxvd2luZyBjb21t YW5kIGFnYWluc3Qgbmdpbng6CgpgYGAKcHJveG1veC1iYWNrdXAtbWFuYWdlciBhY21lIGFjY291 bnQgcmVnaXN0ZXIgcHJveHl0ZXN0IHJvb3RAYmFja3VwLmxvY2FsCi0tZGlyZWN0b3J5ICdodHRw czovL25naW54LWFkZHJlc3MvZGlyCgpBdHRlbXB0aW5nIHRvIGZldGNoIFRlcm1zIG9mClNlcnZp Y2UgZnJvbSAiaHR0cHM6Ly9hY21lLXZtL2RpciIKVGVybXMgb2YgU2VydmljZToKZGF0YTp0ZXh0 L3BsYWluLERvJTIwd2hhdCUyMHRob3UlMjB3aWx0CkRvIHlvdSBhZ3JlZSB0byB0aGUgYWJvdmUg dGVybXM/Clt5fE5dOiB5CkRvIHlvdSB3YW50IHRvIHVzZSBleHRlcm5hbCBhY2NvdW50IGJpbmRp bmc/IFt5fE5dOiBOCkF0dGVtcHRpbmcKdG8gcmVnaXN0ZXIgYWNjb3VudCB3aXRoICJodHRwczov L2FjbWUtdm0vZGlyIi4uLgpSZWdpc3RyYXRpb24Kc3VjY2Vzc2Z1bCwgYWNjb3VudCBVUkw6IGh0 dHBzOi8vYWNtZS12bS9teS1hY2NvdW50LzE2MGU1OGI2NmJkZDcyZGEKYGBgCgpXaGVuIGFkanVz dGluZyB0aGUgbmdpbnggY29uZmlndXJhdGlvbiB0byByZXR1cm4gYW55IG90aGVyIG5vbi1leHBl Y3RlZApzdWNjZXNzIHN0YXR1cyBjb2RlLCBlLmcuIDIwNSwgUEJTIGV4cGVjdGVseSByZWplY3Rz IHdpdGggYEFQSQptaXNiZWhhdmVkOiBBQ01FIHNlcnZlciByZXNwb25kZWQgd2l0aCB1bmV4cGVj dGVkIHN0YXR1cyBjb2RlOiAyMDVgLgoKIyMgTWFpbnRhaW5lciBub3RlczoKClRoZSBwYXRjaCBz ZXJpZXMgaW52b2x2ZXMgdGhlIGZvbGxvd2luZyBjb21wb25lbnRzOgoKcHJveG1veC1hY21lOiBB cHBseSBQQVRDSCAxIHRvIGNoYW5nZSBgZXhwZWN0ZWRgIGZyb20gYHUxNmAgdG8KYFZlYzx1MTY+ YC4gVGhpcyByZXN1bHRzIGluIGEgYnJlYWtpbmcgY2hhbmdlLCBhcyBpdCBjaGFuZ2VzIHRoZSBw dWJsaWMKQVBJIG9mIHRoZSBgQWNtZVJlcXVlc3RgIHR5cGUgdGhhdCBpcyB1c2VkIGJ5IG90aGVy IGNvbXBvbmVudHMuCgpwcm94bW94LWFjbWUtYXBpOiBOZWVkcyB0byBkZXBlbmQgb24gdGhlIG5l dyBwcm94bW94LWFjbWU7IHBhdGNoIGJ1bXAKCnByb3htb3gtYmFja3VwOiBBcHBseSBQQVRDSCAy IHRvIHVzZSB0aGUgbmV3IEFQSSBjaGFuZ2VzOyBubyBicmVha2luZwpjaGFuZ2UgYXMgb2Ygb25s eSBpbnRlcm5hbCBjaGFuZ2VzOyBwYXRjaCBidW1wCgpwcm94bW94LXBlcmwtcnMgLyBwcm94bW94 LWRhdGFjZW50ZXItbWFuYWdlcjogV2lsbCBuZWVkIHRvIHVzZSB0aGUKZGVwZW5kZW5jeSB2ZXJz aW9uIGJ1bXBzIHRvIGZvbGxvdyB0aGUgbmV3IHByb3htb3gtYWNtZS4KCiMjIFBhdGNoIHN1bW1h cnkKCltQQVRDSCAxLzJdIGZpeCAjNjkzOTogc3VwcG9ydCBwcm92aWRlcnMgcmV0dXJuaW5nIDIw NCBmb3Igbm9uY2UKcmVxdWVzdHMKCiogTWFrZSB0aGUgZXhwZWN0ZWQtc3RhdHVzIGxvZ2ljIGFj Y2VwdCBtdWx0aXBsZSBhbGxvd2VkIGNvZGVzLgoqIFRyZWF0IGJvdGggMjAwIE9LIGFuZCAyMDQg Tm8gQ29udGVudCBhcyB2YWxpZCBmb3IgSEVBRCAvbmV3Tm9uY2UsCiAgcHJvdmlkZWQgUmVwbGF5 LU5vbmNlIGlzIHByZXNlbnQuCiogS2VlcCByZWplY3Rpbmcgb3RoZXIgY29kZXMuCgpbUEFUQ0gg Mi8yXSBhY21lOiBhY2NlcHQgSFRUUCAyMDQgZnJvbSBuZXdOb25jZSBlbmRwb2ludAoKKiBVc2Ug dGhlIHVwZGF0ZWQgcHJveG1veC1hY21lIGJlaGF2aW9yIGluIFBCUy4KKiBQQlMgY2FuIG5vdyBy ZWdpc3RlciBhbiBBQ01FIGFjY291bnQgYWdhaW5zdCBzZXJ2ZXJzIHRoYXQgcmV0dXJuIDIwNAog IGZvciB0aGUgbm9uY2UgSEVBRCByZXF1ZXN0LgoqIFN0aWxsIHJlamVjdHMgdW5leHBlY3RlZCBj b2Rlcy4KClRoYW5rcyBmb3IgY29uc2lkZXJpbmcgdGhpcyBwYXRjaCBzZXJpZXMsIEkgbG9vayBm b3J3YXJkIHRvIHlvdXIKZmVlZGJhY2suCgpCZXN0LApTYW11ZWwgUnVmaW5hdHNjaGEKClsxXSBC dWd6aWxsYSByZXBvcnQgIzY5Mzk6CltodHRwczovL2J1Z3ppbGxhLnByb3htb3guY29tL3Nob3df YnVnLmNnaT9pZD02OTM5XShodHRwczovL2J1Z3ppbGxhLnByb3htb3guY29tL3Nob3dfYnVnLmNn aT9pZD02OTM5KQpbMl0gUkZDIDg1NTUgKEFDTUUpOgpbaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvaHRtbC9yZmM4NTU1LyNzZWN0aW9uLTcuMl0oaHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvaHRtbC9yZmM4NTU1LyNzZWN0aW9uLTcuMikKWzNdIFBWReKAmXMgUGVybCBB Q01FIGNsaWVudDoKW2h0dHBzOi8vZ2l0LnByb3htb3guY29tLz9wPXByb3htb3gtYWNtZS5naXQ7 YT1ibG9iO2Y9c3JjL1BWRS9BQ01FLnBtO2g9ZjFlOWJiN2QzMTZlM2NlYTFlMzc2YzYxMGIwNDc5 MTE5MjE3YWVjYztoYj1IRUFEI2w1OTddKGh0dHBzOi8vZ2l0LnByb3htb3guY29tLz9wPXByb3ht b3gtYWNtZS5naXQ7YT1ibG9iO2Y9c3JjL1BWRS9BQ01FLnBtO2g9ZjFlOWJiN2QzMTZlM2NlYTFl Mzc2YzYxMGIwNDc5MTE5MjE3YWVjYztoYj1IRUFEI2w1OTcpCls0XSBQZWJibGUgQUNNRSBzZXJ2 ZXI6CltodHRwczovL2dpdGh1Yi5jb20vbGV0c2VuY3J5cHQvcGViYmxlXShodHRwczovL2dpdGh1 Yi5jb20vbGV0c2VuY3J5cHQvcGViYmxlKQoKcHJveG1veDoKClNhbXVlbCBSdWZpbmF0c2NoYSAo MSk6CiAgZml4ICM2OTM5OiBhY21lOiBzdXBwb3J0IHNlcnZlcnMgcmV0dXJuaW5nIDIwNCBmb3Ig bm9uY2UgcmVxdWVzdHMKCiBwcm94bW94LWFjbWUvc3JjL2FjY291bnQucnMgICAgICB8IDEwICsr KysrLS0tLS0KIHByb3htb3gtYWNtZS9zcmMvYXN5bmNfY2xpZW50LnJzIHwgIDYgKysrLS0tCiBw cm94bW94LWFjbWUvc3JjL2NsaWVudC5ycyAgICAgICB8ICAyICstCiBwcm94bW94LWFjbWUvc3Jj L3JlcXVlc3QucnMgICAgICB8ICA0ICsrLS0KIDQgZmlsZXMgY2hhbmdlZCwgMTEgaW5zZXJ0aW9u cygrKSwgMTEgZGVsZXRpb25zKC0pCgoKcHJveG1veC1iYWNrdXA6CgpTYW11ZWwgUnVmaW5hdHNj aGEgKDEpOgogIGZpeCAjNjkzOTogYWNtZTogYWNjZXB0IEhUVFAgMjA0IGZyb20gbmV3Tm9uY2Ug ZW5kcG9pbnQKCiBzcmMvYWNtZS9jbGllbnQucnMgfCA2ICsrKy0tLQogMSBmaWxlIGNoYW5nZWQs IDMgaW5zZXJ0aW9ucygrKSwgMyBkZWxldGlvbnMoLSkKCgpTdW1tYXJ5IG92ZXIgYWxsIHJlcG9z aXRvcmllczoKICA1IGZpbGVzIGNoYW5nZWQsIDE0IGluc2VydGlvbnMoKyksIDE0IGRlbGV0aW9u cygtKQoKLS0gCkdlbmVyYXRlZCBieSBnaXQtbXVycHAgMC44LjEKCgpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpwYnMtZGV2ZWwgbWFpbGluZyBsaXN0CnBi cy1kZXZlbEBsaXN0cy5wcm94bW94LmNvbQpodHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1i aW4vbWFpbG1hbi9saXN0aW5mby9wYnMtZGV2ZWwK