diff options
Diffstat (limited to 'check-certificates')
| -rw-r--r-- | check-certificates | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/check-certificates b/check-certificates index 89ca9eb..76df7f9 100644 --- a/check-certificates +++ b/check-certificates @@ -66,6 +66,11 @@ $WaitFullyConnected; :if ($Cert != $CertNew) do={ $LogPrintExit debug ("Certificate '" . $CertVal->"name" . "' was not updated, but replaced.") false; + :if (($CertVal->"private-key") = true && ($CertVal->"private-key") != ($CertNewVal->"private-key")) do={ + / certificate remove $CertNew; + $LogPrintExit warning ("Old certificate '" . ($CertVal->"name") . "' has a private key, new certificate does not. Aborting renew.") true; + } + / ip service set certificate=($CertNewVal->"name") [ find where certificate=($CertVal->"name") ]; :do { |