aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--Changelog3
-rwxr-xr-xlacme7
-rw-r--r--lacme.8.md5
3 files changed, 13 insertions, 2 deletions
diff --git a/Changelog b/Changelog
index a9f137e..4168e58 100644
--- a/Changelog
+++ b/Changelog
@@ -2,6 +2,9 @@ lacme (0.7.1) upstream;
* Unprivileged user/group for the internal client resp. webserver are
now configurable at install time.
+ * lacme: new flag `--force`, which aliases to `--min-days=-1`, i.e.,
+ forces renewal regardless of the expiration date of existing
+ certificates.
- lacme: delay webserver socket shutdown to after the process has
terminated.
- documentation: suggest to generate private key material with
diff --git a/lacme b/lacme
index e4b8e01..7f3d65d 100755
--- a/lacme
+++ b/lacme
@@ -63,7 +63,11 @@ sub usage(;$$) {
}
exit $rv;
}
-usage(1) unless GetOptions(\%OPTS, qw/config=s config-certs=s@ socket=s register tos-agreed deactivate min-days=i quiet|q debug help|h/);
+usage(1) unless GetOptions(\%OPTS, qw/config=s config-certs=s@ socket=s
+ register tos-agreed deactivate
+ min-days=i force
+ quiet|q
+ debug help|h/);
usage(0) if $OPTS{help};
$COMMAND = shift(@ARGV) // usage(1, "Missing command");
@@ -643,6 +647,7 @@ if ($COMMAND eq 'account') {
# newOrder [SECTION ..]
#
elsif ($COMMAND eq 'newOrder' or $COMMAND eq 'new-cert') {
+ $OPTS{'min-days'} = -1 if $OPTS{force};
$COMMAND = 'newOrder';
my $conffiles = defined $OPTS{'config-certs'} ? $OPTS{'config-certs'}
: defined $CONFIG->{_}->{'config-certs'} ? [ split(/\s+/, $CONFIG->{_}->{'config-certs'}) ]
diff --git a/lacme.8.md b/lacme.8.md
index ecf87c3..2ffdc25 100644
--- a/lacme.8.md
+++ b/lacme.8.md
@@ -77,7 +77,7 @@ Commands
Upon success, `lacme` prints the new or updated Account Object from
the [ACME] server.
-`lacme` [`--config-certs=`*FILE*] [`--min-days=`*INT*] `newOrder` [*SECTION* …]
+`lacme newOrder` [`--config-certs=`*FILE*] [`--min-days=`*INT*|`--force`] [*SECTION* …]
: Read the certificate configuration *FILE* (see the **[certificate
configuration file](#certificate-configuration-file)** section below
@@ -85,6 +85,9 @@ Commands
for each of its sections (or the given list of *SECTION*s).
Command alias: `new-order`.
+ The flag `--force` is an alias for `--min-days=-1`, which forces
+ renewal regardless of the expiration date of existing certificates.
+
`lacme` `revokeCert` *FILE* [*FILE* …]
: Request that the given certificate(s) *FILE*(s) be revoked. For