From 84f6363da57ccc3a58fc72f60cf51ca70cea34f6 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 19 Feb 2017 13:36:11 +0100
Subject: new-cert: new CLI option "min-days"

---
 lacme | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'lacme')

diff --git a/lacme b/lacme
index f9b3530..75c1465 100755
--- a/lacme
+++ b/lacme
@@ -60,7 +60,7 @@ sub usage(;$$) {
     }
     exit $rv;
 }
-usage(1) unless GetOptions(\%OPTS, qw/config=s config-certs=s@ socket=s agreement-uri=s quiet|q debug help|h/);
+usage(1) unless GetOptions(\%OPTS, qw/config=s config-certs=s@ socket=s agreement-uri=s min-days=i quiet|q debug help|h/);
 usage(0) if $OPTS{help};
 
 $COMMAND = shift(@ARGV) // usage(1, "Missing command");
@@ -619,8 +619,8 @@ elsif ($COMMAND eq 'new-cert') {
 
         # skip certificates that expire at least $conf->{'min-days'} days in the future
         if (-f $conf->{$certtype} and defined (my $t = x509_enddate($conf->{$certtype}))) {
-            my $d = $conf->{'min-days'} // 10;
-            if ($d > 0 and $t - time > $d*86400) {
+            my $d = $OPTS{'min-days'} // $conf->{'min-days'} // 10;
+            if ($d >= 0 and $t - time > $d*86400) {
                 my $d = POSIX::strftime('%Y-%m-%d %H:%M:%S UTC', gmtime($t));
                 print STDERR "[$s] Valid until $d, skipping\n" unless $OPTS{quiet};
                 next;
-- 
cgit v1.2.3