[pve-devel] [PATCH v2 proxmox-acme] support downloading alternate chains

2021-10-08 Thread Fabian Grünbichler
the current default chains end with an expired root certificate for maximum compatibility with old Android versions. this breaks some other older clients (openssl, gnutls) which don't expect chains to contain any expired certificates, even if they are 'above' the trust anchor. by setting $root, it

Re: [pve-devel] [PATCH v2 proxmox-acme] support downloading alternate chains

2021-10-08 Thread Stoiko Ivanov
Tested again against LE production endpoint - LGTM :) Thanks! Reviewed-By: Stoiko Ivanov Tested-By: Stoiko Ivanov On Fri, 8 Oct 2021 10:18:21 +0200 Fabian Grünbichler wrote: > the current default chains end with an expired root certificate for > maximum compatibility with old Android version

[pve-devel] applied: [PATCH v2 proxmox-acme] support downloading alternate chains

2021-10-08 Thread Thomas Lamprecht
On 08.10.21 10:52, Stoiko Ivanov wrote: > Tested again against LE production endpoint - LGTM :) > Thanks! > > Reviewed-By: Stoiko Ivanov > Tested-By: Stoiko Ivanov with s/By/by/ for those trailers: applied, thanks! ___ pve-devel mailing list pve-d

[pve-devel] [PATCH docs] fix PVE 6 repository entries

2021-10-08 Thread Mira Limbeck
With the release of PBS, and switching /etc/apt/auth.conf to use /debian/pve as path instead of just /debian, the sources.list for pve-enterprise must contain the /pve at the end. Otherwise there is no match and updating via the pve-enterprise repository doesn't work. Signed-off-by: Mira Limbeck

[pve-devel] [RFC ha-manager] manage: handle edge case where a node gets stuck in 'fence' state

2021-10-08 Thread Fabian Ebner
If all services in 'fence' state are gone from a node (e.g. by removing the services) before fence_node() was successful, a node would get stuck in the 'fence' state. Avoid this by calling fence_node() if the node is in 'fence' state, regardless of service state. Reported in the community forum: h