[PATCH proxmox 0/3] fix #7166: acme: stop and time out stalled certificate orders

[Samuel Rufinatscha <s.rufinatscha@proxmox.com>]

Certificate orders can get stuck waiting for the CA and clicking on
stop does not end the task [0]. With HTTP-01, the task also keeps
port 80 busy, so another order fails with "Address already in use".

This series makes validation and finalization abortable and gives each
domain's validation and order finalization five minutes to finish. The
validation timeout starts after plugin setup to preserve configured DNS
propagation waits. The plugin is cleaned up on cancellation or timeout.

Testing:

Reproduced the issue on latest PDM with Pebble v2.10.1 by delaying
HTTP-01 validation and pausing the CA during finalization. Tasks ignored
Stop and kept running. With the patches applied, tasks stopped promptly
on request or timed out after five minutes, releasing port 80.
Certificate ordering and renewal still worked.

Maintainer notes:

* both PBS and PDM require the updated dependency

[0] https://bugzilla.proxmox.com/show_bug.cgi?id=7166

proxmox:

Samuel Rufinatscha (3):
  acme-api: extract certificate order finalization helper
  fix #7166: acme-api: allow stopping certificate orders
  fix #7166: acme-api: time out validation and finalization

 proxmox-acme-api/src/certificate_helpers.rs | 39 ++++++++++++++++-----
 1 file changed, 31 insertions(+), 8 deletions(-)


Summary over all repositories:
  1 files changed, 31 insertions(+), 8 deletions(-)

-- 
Generated by git-murpp 0.8.1