nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix broken check for cert expiration time in renew command

Browse Source 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
This commit is contained in:
Xavier Bachelot 2019-01-28 15:40:13 +01:00
parent c7b8ffb701
commit 6eff1118f8
Failed to extract signature
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
easyrsa3/easyrsa
View File

@ -1006,13 +1006,13 @@ at: $crt_in"
# Check if old cert is expired or expires within 30 days
expire_date=$(
"$EASYRSA_OPENSSL" x509 -in "$crt_in" -noout -enddate |
sed -n 's/^notAfter=//'
sed 's/^notAfter=//'
)
expire_date=$(date -d "$expire_date" +%s)
allow_renew_date=$(date -d '+30day' +%s)
[ "$expire_date" -gt "$allow_renew_date" ] || die "\
[ "$expire_date" -lt "$allow_renew_date" ] || die "\
Certificate expires in more than 30 days.
Renewal not allowed."