[pmg-devel] [RFC api/gui/wtk/acme 0/many] Certificates & ACME
Wolfgang Bumiller
w.bumiller at proxmox.com
Tue Mar 9 15:13:44 CET 2021
These are the pmg-api, pmg-gui and proxmox-widget-toolkit and
proxmox-acme parts of the ACME series for PMG.
This requires `pmg-rs` package, which replaces the ACME client from
`proxmox-acme` and provides the CSR generation and is written in rust.
Note that the DNS challenge handling still uses proxmox-acme for now.
proxmox-acme:
* Just a `use` statement fixup
* Still used for the DNS challenge
pmg-gui:
Just adds the "certificate view", but the real dirt lives in the
widget-toolkit.
proxmox-widget-toolkits:
Gets the Certificate, ACME Account, ACME Plugin and ACME Domain view
from PVE adapted to be usable for PMG.
Changes to PVE are mainly:
* API URLs need to be provided since they differ a bit between PVE
and PMG.
* some additional buttons/fields specific to pmg generated if the
parameters for them are present
pmg-api:
Simply gets API entry points for the above. These too are mostly
copied from PVE and adapted (also the ACME client API from pmg-rs is slightly
different/cleaned up, so that's a minor incompatiblity in some
otherwise common code, but a `pve-rs` may fix that). But some things
could definitely already go to pve-common (especially schema stuff).
Note that while I did add the corresponding files to the cluster sync,
this still needs testing *and* issuing an API certificate may break
cluster functionality currently. (Stoiko is working on that)
More information about the pmg-devel
mailing list