MINOR: acme: add profile keyword

Add support for the ACME profile keyword introduced in HAProxy 3.4. The
profile directive requests a specific certificate profile from the CA by
including a profile field in the newOrder request.

Author: mjuraga

config-parser/section-parsers.go

@@ -1049,6 +1049,7 @@ func (p *configParser) getAcmeParser() *Parsers {
 	addParser(parser, &sequence, &simple.Word{Name: "directory"})
 	addParser(parser, &sequence, &simple.Word{Name: "keytype"})
 	addParser(parser, &sequence, &simple.Word{Name: "map"})
+	addParser(parser, &sequence, &simple.Word{Name: "profile"})
 	addParser(parser, &sequence, &simple.OnOff{Name: "reuse-key"})
 	return p.createParsers(parser, sequence)
 }

configuration/acme_provider.go

@@ -173,6 +173,7 @@ func ParseAcmeProvider(p parser.Parser, name string) (*models.AcmeProvider, erro
 		"directory":     &acme.Directory,
 		"keytype":       &acme.Keytype,
 		"map":           &acme.Map,
+		"profile":       &acme.Profile,
 		"reuse-key":     &acme.ReuseKey,
 	}
 
@@ -243,6 +244,7 @@ func SerializeAcmeProvider(p parser.Parser, acme *models.AcmeProvider) error {
 		"directory":     acme.Directory,
 		"keytype":       acme.Keytype,
 		"map":           acme.Map,
+		"profile":       acme.Profile,
 		"reuse-key":     onOff(acme.ReuseKey),
 	}
 

models/acme_provider.go

@@ -12115,6 +12115,12 @@ definitions:
         description: ACME provider's name
         type: string
         x-nullable: false
+      profile:
+        description: |
+          Request a specific certificate profile from the CA by including a 'profile'
+          field in the newOrder request (draft-ietf-acme-profiles). Profile names
+          are CA-specific short identifiers (e.g. 'classic', 'shortlived').
+        type: string
       reuse_key:
         description: Try to reuse the private key instead of generating a new one.
         enum:

models/acme_provider_compare_test.go

@@ -50,6 +50,12 @@ acme:
     map:
       type: string
       description: The map which will be used to store the ACME token (key) and thumbprint
+    profile:
+      type: string
+      description: |
+        Request a specific certificate profile from the CA by including a 'profile'
+        field in the newOrder request (draft-ietf-acme-profiles). Profile names
+        are CA-specific short identifiers (e.g. 'classic', 'shortlived').
     reuse_key:
       type: string
       enum: [enabled, disabled]

models/acmeprovider_diff_generated.go

@@ -1030,6 +1030,7 @@ acme test
   directory https://acme.example.com/directory
   keytype ECDSA
   map acme@t
+  profile shortlived
   reuse-key on
 
 crt-store cert-bunker1

models/acmeprovider_equal_generated.go

@@ -3214,6 +3214,7 @@
             "directory": "https://acme.example.com/directory",
             "keytype": "ECDSA",
             "map": "acme@t",
+            "profile": "shortlived",
             "reuse_key": "enabled"
         }
     },