paxton
/
mailcow
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

acme: changed the threshold for certificate renewal 

The threshold for certificate renewal is changed to 30 days before
expiry date (was 14 days).
fixes #2607
master
Arlon1 2019-05-16 15:31:50 +02:00
parent dac0ea15d4
commit 2d5add5a13
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
data/Dockerfiles/acme/docker-entrypoint.sh
View File

@ -428,8 +428,8 @@ while true; do
if [[ ${SAN_CHANGE} == 0 ]]; then if [[ ${SAN_CHANGE} == 0 ]]; then
# Certificate did not change but could be due for renewal (4 weeks) # Certificate did not change but could be due for renewal (4 weeks)
if ! openssl x509 -checkend 1209600 -noout -in ${ACME_BASE}/cert.pem; then if ! openssl x509 -checkend 2592000 -noout -in ${ACME_BASE}/cert.pem; then
log_f "Certificate is due for renewal (< 2 weeks)" log_f "Certificate is due for renewal (< 30 days)"
else else
log_f "Certificate validation done, neither changed nor due for renewal, sleeping for another day." log_f "Certificate validation done, neither changed nor due for renewal, sleeping for another day."
sleep 1d sleep 1d