From b7592f6b1824e12e5856d726547802ea336359db Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 2 May 2019 11:59:43 +0200
Subject: check-certificates: do not try to renew locally issued certificates

---
 check-certificates | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'check-certificates')

diff --git a/check-certificates b/check-certificates
index 0d0ea55..603d7f2 100644
--- a/check-certificates
+++ b/check-certificates
@@ -26,7 +26,7 @@
   :return [ $CharacterReplace [ $CharacterReplace [ :tostr $1 ] "w" "w " ] "d" "d " ];
 }
 
-:foreach Cert in=[ / certificate find where !revoked expires-after<3w ] do={
+:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={
   :local CertName [ / certificate get $Cert name ];
   :local CommonName [ / certificate get $Cert common-name ];
   :local FingerPrint [ :tostr [ / certificate get $Cert fingerprint ] ];
-- 
cgit v1.2.3-54-g00ecf