From 1282a91f0401deaaa516826afc6b92622389aeee Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 20 Mar 2020 22:03:31 +0100
Subject: check-certificates: exclude certificates issued by SCEP

---
 check-certificates | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/check-certificates b/check-certificates
index d5dce80..350adc7 100644
--- a/check-certificates
+++ b/check-certificates
@@ -25,7 +25,7 @@
   $LogPrintExit warning "Time is not yet synchronized." true;
 }
 
-:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={
+:foreach Cert in=[ / certificate find where !revoked !ca !scep-url expires-after<3w ] do={
   :local CertVal [ / certificate get $Cert ];
 
   :do {
@@ -91,7 +91,7 @@
   }
 }
 
-:foreach Cert in=[ / certificate find where !revoked expires-after<2w fingerprint~"."] do={
+:foreach Cert in=[ / certificate find where !revoked !scep-url expires-after<2w fingerprint~"."] do={
   :local CertVal [ / certificate get $Cert ];
 
   :local ExpiresAfter [ $FormatExpire ($CertVal->"expires-after") ];
-- 
cgit v1.2.3-54-g00ecf