Renew certificate 3 weeks before expiry

This seems to fit letsencrypt better, as it sends out certificate renew reminder emails ~19 days before expiry
google · Aug 31, 2016 · 97f0456 · 97f0456
1 parent fa41202
commit 97f0456
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/cmd/acme/cert.go b/cmd/acme/cert.go
@@ -97,10 +97,10 @@ func runCert(args []string) {
 	certPath := sameDir(certKeypath, cn+".crt")
 	certCrt, err := readCrt(certPath)
 	if err == nil {
-		// do not re-issue certificate if it's not about to expire in less than one week
+		// do not re-issue certificate if it's not about to expire in less than three weeks
 		expiresIn := certCrt.NotAfter.Sub(time.Now())
-		if expiresIn > 24*7*time.Hour {
-			errorf("cert is still valid for more than one week, not renewing")
+		if expiresIn > 24*7*3*time.Hour {
+			errorf("cert is still valid for more than a three weeks, not renewing")
 			exit()
 		}
 	}