# Skip renewal for recent enough certificates

lacme newOrder 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino1="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"

lacme newOrder 2>"$STDERR" || fail
grepstderr -Ex "^\[simpletest-rsa\] Valid until .*, skipping"

lacme newOrder --force 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino2="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"
test "$ino1" != "$ino2" # we never truncate existing certificates

sed -ri 's|^#?min-days\s*=.*|min-days = 90|' /etc/lacme/lacme-certs.conf
lacme newOrder 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino3="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"
test "$ino2" != "$ino3" # we never truncate existing certificates

# vim: set filetype=sh :