check-certificates: complete certificate renewal time

With a modified certificate renewal time may have failed if the new
certificate was not found.
This commit is contained in:
Christian Hesse 2021-01-11 00:16:00 +01:00
parent d926c84cdb
commit 6cea5a9f9b

View file

@ -56,7 +56,7 @@ $WaitFullyConnected;
}
}
:local CertNew [ / certificate find where common-name=($CertVal->"common-name") fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>3w ];
:local CertNew [ / certificate find where common-name=($CertVal->"common-name") fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
:local CertNewVal [ / certificate get $CertNew ];
:if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") ] = false) do={