From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 0518F1FF165 for <inbox@lore.proxmox.com>; Wed, 29 Jan 2025 04:36:37 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 706AC18067; Wed, 29 Jan 2025 04:36:33 +0100 (CET) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1738121785; x=1738726585; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=sCigSvQ4dJAYc9nQO5zdbMLYEAg3ktExogYzzUL2v90=; b=FneL/A4wMuONdtIaK0C5PGQuQR12Fu5QkkpHrMd7tJ2pyCANaehT//XopzCvDHYvZf 7+AbeRRXPlFaJxA8Xx/MWf50qGlQAXyB5+oXjoZXiPsFbLMq56Xdx+Rif3OC9fZO+qbX TczYWHaQLPyvtv6N0GdUczb6VaKMZpTjlT1DWBGueC3NKtSR311oPaRooBb9a7szxsPl u8JEhwlkO+0pa2HAWqRDIjfdrRU24FLntByVLRBRF5jH/9VGLSICCSIlDgFG6YTZyNX+ XhWXWwQOLwZBg8AwBuXhJn7WieCnVumY3EgNqaytEEUh/UdR46Dqetr8r3saF6qWfI26 ab9Q== X-Gm-Message-State: AOJu0YzI5mWF+RhEo92V1+aCFL0J+Xb9xBFQxajLSkOrRFNUvIY4GmaS llx3QaxvDY2AHNsqbBi+VavPp+uRiN4Y8LDMeXSvRclUEb3l5k1EN9vwtO5U X-Gm-Gg: ASbGncuzKhyI8+Fem9f/OVB/Qh3anYfeCywNkqmzKm57LXmibIsjTRzQvNriheZ+L90 qyTsDqVs3PS0LvJkG/K9dgPH9aL3rGtpSvWbsZfgzJgVvG1VG1/QQFeVLEDuwHQwI2CwiO/aVvA A0e3DPZBnJ48OdYynuquoU+00JV3Mhpfm8R/5ccFu0y0bMP9tyOrgLuMRXh1w/BSqQSuR8cXTzE Iyq8Rbc0Rfjx3SpY+Qo8NLfrdFFl+JBFSRSlAhSkHi4OvaxbVsxXP7el8jDa9fXAG0ngByhX1mJ bo5MQLNDNgBLTIfw2oQkvdobV8XAHjYzF/3IggguGAJBw6H0G8fDSA5aW5JEN6/S X-Google-Smtp-Source: AGHT+IH7RonkCJFh0nXkZzQmaW7htzivFUtmFvFEDzkvKpSe1nYcuYcosauCIjjtnsS6JwOkUSYJzA== X-Received: by 2002:a05:6402:210a:b0:5d9:f1f7:5bcc with SMTP id 4fb4d7f45d1cf-5dc5effcb48mr3428315a12.29.1738121784610; Tue, 28 Jan 2025 19:36:24 -0800 (PST) X-Received: by 2002:adf:f943:0:b0:385:f996:1b8e with SMTP id ffacd0b85a97d-38c51951006mr1081393f8f.16.1738121784106; Tue, 28 Jan 2025 19:36:24 -0800 (PST) MIME-Version: 1.0 References: <20241216041428.1184350-1-thomas@atskinner.net> <20241216041428.1184350-5-thomas@atskinner.net> <1737709944.2rc2l2rfel.astroid@yuna.none> In-Reply-To: <1737709944.2rc2l2rfel.astroid@yuna.none> From: Thomas Skinner <thomas@atskinner.net> Date: Tue, 28 Jan 2025 21:35:57 -0600 X-Gmail-Original-Message-ID: <CALn9RMcGHqyxxHwijBzvaSWBqJdCEO3jjDoLghGTS4E2cubigg@mail.gmail.com> X-Gm-Features: AWEUYZmIotVHKsUa3kdu13Y7pOE9ubAjB4XsNQ3HSemyrejhE2Bug0LWg4WQTbU Message-ID: <CALn9RMcGHqyxxHwijBzvaSWBqJdCEO3jjDoLghGTS4E2cubigg@mail.gmail.com> To: =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com> X-SPAM-LEVEL: Spam detection results: 0 AWL -0.070 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy FREEMAIL_FORGED_FROMDOMAIN 0.001 2nd level domains in From and EnvelopeFrom freemail headers are different FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HEADER_FROM_DIFFERENT_DOMAINS 0.038 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust RCVD_IN_MSPIKE_H2 0.001 Average reputation (+2) RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record T_SCC_BODY_TEXT_LINE -0.01 - URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [mod.rs, proxmox.com] Subject: Re: [pve-devel] [PATCH perl-rs v2 4/5] fix #4234: openid: adjust openid verification function for userinfo option X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gRnJpLCBKYW4gMjQsIDIwMjUgYXQgMzoxN+KAr0FNIEZhYmlhbiBHcsO8bmJpY2hsZXIKPGYu Z3J1ZW5iaWNobGVyQHByb3htb3guY29tPiB3cm90ZToKPgo+IE9uIERlY2VtYmVyIDE2LCAyMDI0 IDU6MTQgYW0sIFRob21hcyBTa2lubmVyIHdyb3RlOgo+ID4gU2lnbmVkLW9mZi1ieTogVGhvbWFz IFNraW5uZXIgPHRob21hc0BhdHNraW5uZXIubmV0Pgo+ID4gLS0tCj4gPiAgcHZlLXJzL3NyYy9v cGVuaWQvbW9kLnJzIHwgOSArKysrKysrLS0KPiA+ICAxIGZpbGUgY2hhbmdlZCwgNyBpbnNlcnRp b25zKCspLCAyIGRlbGV0aW9ucygtKQo+ID4KPiA+IGRpZmYgLS1naXQgYS9wdmUtcnMvc3JjL29w ZW5pZC9tb2QucnMgYi9wdmUtcnMvc3JjL29wZW5pZC9tb2QucnMKPiA+IGluZGV4IDFmYTc1NzIu LmNkNTczZWUgMTAwNjQ0Cj4gPiAtLS0gYS9wdmUtcnMvc3JjL29wZW5pZC9tb2QucnMKPiA+ICsr KyBiL3B2ZS1ycy9zcmMvb3BlbmlkL21vZC5ycwo+ID4gQEAgLTUwLDEzICs1MCwxOCBAQCBtb2Qg ZXhwb3J0IHsKPiA+ICAgICAgfQo+ID4KPiA+ICAgICAgI1tleHBvcnQocmF3X3JldHVybildCj4g PiAtICAgIHB1YiBmbiB2ZXJpZnlfYXV0aG9yaXphdGlvbl9jb2RlKAo+ID4gKyAgICBwdWIgZm4g dmVyaWZ5X2F1dGhvcml6YXRpb25fY29kZV91c2VyaW5mbygKPgo+IHdlIGNvdWxkIGVpdGhlciBh ZGQgYSBuZXcgd3JhcHBlciBsaWtlIGluIHByb3htb3gtb3BlbmlkLCBrZWVwaW5nIHRoZQo+IG9s ZCBvbmUgYXJvdW5kICh1bnRpbCBQVkUgOS4wKQo+Cj4gPiAgICAgICAgICAjW3RyeV9mcm9tX3Jl Zl0gdGhpczogJk9wZW5JZCwKPiA+ICAgICAgICAgIGNvZGU6ICZzdHIsCj4gPiAgICAgICAgICBw cml2YXRlX2F1dGhfc3RhdGU6IFByaXZhdGVBdXRoU3RhdGUsCj4gPiArICAgICAgICBkaXNhYmxl X3VzZXJpbmZvOiBib29sLAo+Cj4gb3IgbWFrZSB0aGlzIGFuIE9wdGlvbjxib29sPiBhbmQgbm90 IHJlbmFtZSB0aGUgZm4gc28gZXhpc3RpbmcgY2FsbGVycwo+IGFyZSBub3QgYnJva2VuCgpJcyB0 aGlzIGEgYmFja3dhcmRzIGNvbXBhdGlibGUgZml4PyBUaGlzIHdvdWxkIHNlZW0gbW9yZSBwcmVm ZXJhYmxlIHRvCm1lIGFuZCBwcm92aWRlIGEgcmVhc29uYWJsZSBkZWZhdWx0LiBJZiBub3QsIEkg Y2FuIGRlZmluaXRlbHkga2VlcCB0aGUKb2xkIG9uZSBhcm91bmQgdG8gcHJvdmlkZSBiYWNrd2Fy ZHMgY29tcGF0LgoKPiA+ICAgICAgKSAtPiBSZXN1bHQ8VmFsdWUsIEVycm9yPiB7Cj4gPiAgICAg ICAgICBsZXQgb3Blbl9pZCA9IHRoaXMuaW5uZXIubG9jaygpLnVud3JhcCgpOwo+ID4gLSAgICAg ICAgbGV0IGNsYWltcyA9IG9wZW5faWQudmVyaWZ5X2F1dGhvcml6YXRpb25fY29kZV9zaW1wbGUo Y29kZSwgJnByaXZhdGVfYXV0aF9zdGF0ZSk/Owo+ID4gKyAgICAgICAgbGV0IGNsYWltcyA9IG9w ZW5faWQudmVyaWZ5X2F1dGhvcml6YXRpb25fY29kZV9zaW1wbGVfdXNlcmluZm8oCj4KPiBpZiB3 ZSBnbyB0aGUgT3B0aW9uIHJvdXRlLCB3ZSBjb3VsZCBlaXRoZXIgc2VsZWN0IHdoaWNoIHByb3ht b3gtb3BlbmlkCj4gZm4gdG8gY2FsbCBoZXJlLCBvciB1bndyYXAgdGhlIE9wdGlvbiB0byBmYWxz ZSBhbmQganVzdCBjYWxsIHRoZSBuZXcKPiBvbmUuCgpVbndyYXBwaW5nIHRvIGZhbHNlIGFuZCBj YWxsaW5nIHRoZSBuZXcgb25lIGRvZXMgbWFrZSBzZW5zZSB0byBtZS4KCj4gdGhlIHJlYXNvbiBJ J2QgcHJlZmVyIGEgYmFja3dhcmRzLWNvbXBhdCBpbXBsZW1lbnRhdGlvbiBoZXJlIGlzIHRoYXQK PiB3aXRob3V0IGl0LCB3ZSBuZWVkIHRvIGhhdmUgdGhlIGZvbGxvd2luZyByZWxhdGlvbnM6Cj4K PiBwdmUtYWNjZXNzLWNvbnRyb2w6IGRlcGVuZHMgb24gbmV3IGxpYnB2ZS1ycy1wZXJsCj4gbGli cHZlLXJzLXBlcmw6IGJyZWFrcyBvbGQgcHZlLWFjY2Vzcy1jb250cm9sCj4gbGlicHZlLXJzLXBl cmw6IGRwZW5kcyBvbiBuZXcgbGlicnVzdC1wcm94bW94LW9wZW5pZC1kZXYKPgo+IHdoZXJlYXMg d2l0aCBhIGJhY2t3YXJkcy1jb21wYXQgaW1wbGVtZW50YXRpb24gaW4gbGlicHZlLXJzLXBlcmwg d2UganVzdAo+IG5lZWQ6Cj4gcHZlLWFjY2Vzcy1jb250cm9sIGRlcGVuZHMgb24gbmV3IGxpYnB2 ZS1ycy1wZXJsCj4gbGlicHZlLXJzLXBlcmw6IGRlcGVuZHMgb24gbmV3IGxpYnJ1c3QtcHJveG1v eC1vcGVuaWQtZGV2Cj4KPiB3aGljaCBpcyBtdWNoIGxlc3MgZW50YW5nbGVkIGFzIGFsbCB0aGUg dmVyc2lvbiBjb25zdHJhaW50cyBnbyBpbiB0aGUKPiBzYW1lIGRpcmVjdGlvbi4KCkNvbXBsZXRl bHkgYWdyZWUgd2l0aCBub3Qgd2FudGluZyB0byBicmVhayBiYWNrd2FyZHMgY29tcGF0LiBJZiB0 aGUKT3B0aW9uIG1ldGhvZCBpcyBzdWZmaWNpZW50IGZvciB0aGlzIGFuZCB3ZSBjYW4ganVzdCBj YWxsIHRoZSBuZXcKZnVuY3Rpb24gd2l0aCB0aGUgdW53cmFwcGVkIHZhbHVlLCB0aGF0IHdvcmtz IGZvciBtZS4KCj4gPiArICAgICAgICAgICAgY29kZSwKPiA+ICsgICAgICAgICAgICAmcHJpdmF0 ZV9hdXRoX3N0YXRlLAo+ID4gKyAgICAgICAgICAgIGRpc2FibGVfdXNlcmluZm8sCj4gPiArICAg ICAgICApPzsKPiA+Cj4gPiAgICAgICAgICBPayh0b192YWx1ZSgmY2xhaW1zKT8pCj4gPiAgICAg IH0KPiA+IC0tCj4gPiAyLjM5LjUKPiA+Cj4gPgo+ID4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18KPiA+IHB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKPiA+IHB2 ZS1kZXZlbEBsaXN0cy5wcm94bW94LmNvbQo+ID4gaHR0cHM6Ly9saXN0cy5wcm94bW94LmNvbS9j Z2ktYmluL21haWxtYW4vbGlzdGluZm8vcHZlLWRldmVsCj4gPgo+ID4KPiA+Cj4KCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5n IGxpc3QKcHZlLWRldmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5j b20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=