From: Tom Hughes <tom@compton.nu>
Date: Fri, 26 Jan 2018 10:23:45 +0000 (+0000)
Subject: Start reminding about expiry at 21 days
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/3c7a077610049f811e11b295e69772f69f30bdba

Start reminding about expiry at 21 days
---

diff --git a/cookbooks/letsencrypt/files/default/bin/check-certificate b/cookbooks/letsencrypt/files/default/bin/check-certificate
index d292b5622..303314fca 100755
--- a/cookbooks/letsencrypt/files/default/bin/check-certificate
+++ b/cookbooks/letsencrypt/files/default/bin/check-certificate
@@ -10,7 +10,7 @@ begin
 
   if Time.now < certificate.not_before
     puts "Certificate #{domain} not valid until #{certificate.not_before}"
-  elsif certificate.not_after - Time.now < 14 * 86400
+  elsif certificate.not_after - Time.now < 21 * 86400
     puts "Certificate #{domain} expires at #{certificate.not_after}"
   else
     subject_alt_name = certificate.extensions.find { |e| e.oid == "subjectAltName" }