blob: aca1b342c1c603cb033ad5babb7314369a8da380 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
# Skip renewal for recent enough certificates
lacme newOrder 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino1="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"
lacme newOrder 2>"$STDERR" || fail
grepstderr -Ex "^\[simpletest-rsa\] Valid until .*, skipping"
lacme newOrder --force 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino2="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"
test "$ino1" != "$ino2" # we never truncate existing certificates
sed -ri 's|^#?min-days\s*=.*|min-days = 90|' /etc/lacme/lacme-certs.conf
lacme newOrder 2>"$STDERR" || fail
grepstderr -Exq "Installing X.509 certificate chain /etc/lacme/simpletest.rsa.crt"
ino3="$(stat -c%i /etc/lacme/simpletest.rsa.crt)"
test "$ino2" != "$ino3" # we never truncate existing certificates
# vim: set filetype=sh :
|
