change openssl to use enddate for expiry date check

This commit is contained in:
Markus Germeier
2015-12-06 18:25:54 +01:00
parent 9c69b624c2
commit 9f93ef5e41

View File

@@ -221,8 +221,8 @@ fi
echo -n "Found existing cert for ${domain}. Expire date ..."
set +e; openssl x509 -checkend $((${RENEW_DAYS} * 86400)) -noout -in "certs/${domain}/cert.pem"; expiring=$?; set -e
if [[ ${expiring} -eq 0 ]]; then
valid=$(openssl x509 -text -noout -in "certs/${domain}/cert.pem" | grep -i "not after" | cut -d: -f2- )
echo "${valid} Skipping. (Valid longer than ${RENEW_DAYS} days.)"
valid=$(openssl x509 -enddate -noout -in "certs/${domain}/cert.pem" | cut -d= -f2- )
echo " ${valid} Skipping. (Valid longer than ${RENEW_DAYS} days.)"
continue
fi
echo " is within ${RENEW_DAYS} days. Renewing..."