From 40a54d2ad35630b1c8a7cd88791db032a7983d4d Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 28 Jun 2017 21:33:40 +0200
Subject: Change the default 'min-days' from 10 to 21.

This avoids expiration notices from Let's Encrypt when auto-renewal is
done by a cronjob: Let's Encrypt sends a notice 19 (then 9) days before
expiration.
---
 lacme | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'lacme')

diff --git a/lacme b/lacme
index fd90d1e..d7a416e 100755
--- a/lacme
+++ b/lacme
@@ -714,7 +714,7 @@ elsif ($COMMAND eq 'new-cert') {
 
         # skip certificates that expire at least $conf->{'min-days'} days in the future
         if (-f $conf->{$certtype} and defined (my $t = x509_enddate($conf->{$certtype}))) {
-            my $d = $OPTS{'min-days'} // $conf->{'min-days'} // 10;
+            my $d = $OPTS{'min-days'} // $conf->{'min-days'} // 21;
             if ($d >= 0 and $t - time > $d*86400) {
                 my $d = POSIX::strftime('%Y-%m-%d %H:%M:%S UTC', gmtime($t));
                 print STDERR "[$s] Valid until $d, skipping\n" unless $OPTS{quiet};
-- 
cgit v1.2.3