diff options
author | Christian Hesse <mail@eworm.de> | 2020-03-20 22:03:31 +0100 |
---|---|---|
committer | Christian Hesse <mail@eworm.de> | 2020-03-20 22:03:31 +0100 |
commit | 1282a91f0401deaaa516826afc6b92622389aeee (patch) | |
tree | f224b54ef82e54b092b96076b2cbaadc7fae421e | |
parent | 1cde38e2da8d02ae722c95a1a499c7b1ad76a7f8 (diff) |
check-certificates: exclude certificates issued by SCEP
-rw-r--r-- | check-certificates | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/check-certificates b/check-certificates index d5dce80..350adc7 100644 --- a/check-certificates +++ b/check-certificates @@ -25,7 +25,7 @@ $LogPrintExit warning "Time is not yet synchronized." true; } -:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={ +:foreach Cert in=[ / certificate find where !revoked !ca !scep-url expires-after<3w ] do={ :local CertVal [ / certificate get $Cert ]; :do { @@ -91,7 +91,7 @@ } } -:foreach Cert in=[ / certificate find where !revoked expires-after<2w fingerprint~"."] do={ +:foreach Cert in=[ / certificate find where !revoked !scep-url expires-after<2w fingerprint~"."] do={ :local CertVal [ / certificate get $Cert ]; :local ExpiresAfter [ $FormatExpire ($CertVal->"expires-after") ]; |