Change the default 'min-days' from 10 to 21.

This avoids expiration notices from Let's Encrypt when auto-renewal is
done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before
expiration.

1 files changed, 2 insertions, 0 deletions

diff --git a/Changelog b/Changelog
index fdb0775..0619ffd 100644
--- a/Changelog
+++ b/Changelog
@@ -10,6 +10,8 @@ lacme (0.3) upstream;
     without a public HTTP daemon listening on port 80 need to set the
     'listen' option to [::] and/or 0.0.0.0, and possibly set the
     'iptables' option to Yes.
+  + Change 'min-days' default from 10 to 21, to avoid expiration notices
+    from Let's Encrypt when auto-renewal is done by a cronjob.
   - Ensure lacme's config file descriptor is not passed to the accountd
     or webserver components.
   - new-cert: sort section names if not passed explicitely.