From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 88DF11FF146 for ; Tue, 09 Jun 2026 15:16:05 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id DDD131112F; Tue, 9 Jun 2026 15:16:01 +0200 (CEST) From: Thomas Ellmenreich To: pve-devel@lists.proxmox.com Subject: [PATCH common/proxmox-acme 0/2] fix #5978: pem parser: relax parsing of chain entries Date: Tue, 9 Jun 2026 15:15:06 +0200 Message-ID: <20260609131549.104216-1-t.ellmenreich@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1781010911633 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.131 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: NN7KFDSJT3UZ44ZHJGOYJOGU6CQUHG4S X-Message-ID-Hash: NN7KFDSJT3UZ44ZHJGOYJOGU6CQUHG4S X-MailFrom: t.ellmenreich@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Thomas Ellmenreich X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: According to RFC 8555, expected certchains should come without whitespace or explanatory texts inbetween chain entries. These two patches relax our parser to also accept text or whitespaces inbetween chain entries. pve-common: Thomas Ellmenreich (1): fix #5978: pem parser: relax parsing of chain entries: src/PVE/Certificate.pm | 23 ++-- test/Makefile | 1 + test/check_pem_test.pl | 264 +++++++++++++++++++++++++++++++++++++++++ 3 files changed, 276 insertions(+), 12 deletions(-) create mode 100755 test/check_pem_test.pl proxmox-acme: Thomas Ellmenreich (1): fix #5978: pem parser: relax parsing of chain entries: src/PVE/ACME.pm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) Summary over all repositories: 4 files changed, 281 insertions(+), 15 deletions(-) -- Generated by murpp 0.12.0