From 6cea5a9f9b7f331ef0dcc7eb494887eef2441a62 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 11 Jan 2021 00:16:00 +0100
Subject: check-certificates: complete certificate renewal time

With a modified certificate renewal time may have failed if the new
certificate was not found.
---
 check-certificates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'check-certificates')

diff --git a/check-certificates b/check-certificates
index 76df7f9..e54b915 100644
--- a/check-certificates
+++ b/check-certificates
@@ -56,7 +56,7 @@ $WaitFullyConnected;
       }
     }
 
-    :local CertNew [ / certificate find where common-name=($CertVal->"common-name") fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>3w ];
+    :local CertNew [ / certificate find where common-name=($CertVal->"common-name") fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
     :local CertNewVal [ / certificate get $CertNew ];
 
     :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") ] = false) do={
-- 
cgit v1.2.3-70-g09d2