aboutsummaryrefslogtreecommitdiffstats
path: root/lacme
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2017-06-28 21:33:40 +0200
committerGuilhem Moulin <guilhem@fripost.org>2017-06-28 22:09:50 +0200
commit40a54d2ad35630b1c8a7cd88791db032a7983d4d (patch)
tree12966b4e5a14e81c3c2581437aa01d68201c7bf0 /lacme
parent80c3a95a95ed268905fa87a398748f94628eed44 (diff)
Change the default 'min-days' from 10 to 21.
This avoids expiration notices from Let's Encrypt when auto-renewal is done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before expiration.
Diffstat (limited to 'lacme')
-rwxr-xr-xlacme2
1 files changed, 1 insertions, 1 deletions
diff --git a/lacme b/lacme
index fd90d1e..d7a416e 100755
--- a/lacme
+++ b/lacme
@@ -714,7 +714,7 @@ elsif ($COMMAND eq 'new-cert') {
# skip certificates that expire at least $conf->{'min-days'} days in the future
if (-f $conf->{$certtype} and defined (my $t = x509_enddate($conf->{$certtype}))) {
- my $d = $OPTS{'min-days'} // $conf->{'min-days'} // 10;
+ my $d = $OPTS{'min-days'} // $conf->{'min-days'} // 21;
if ($d >= 0 and $t - time > $d*86400) {
my $d = POSIX::strftime('%Y-%m-%d %H:%M:%S UTC', gmtime($t));
print STDERR "[$s] Valid until $d, skipping\n" unless $OPTS{quiet};