aboutsummaryrefslogtreecommitdiffstats
path: root/check-certificates
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2020-03-20 22:03:31 +0100
committerGravatar Christian Hesse <mail@eworm.de>2020-03-20 22:03:31 +0100
commit1282a91f0401deaaa516826afc6b92622389aeee (patch)
treef224b54ef82e54b092b96076b2cbaadc7fae421e /check-certificates
parent1cde38e2da8d02ae722c95a1a499c7b1ad76a7f8 (diff)
check-certificates: exclude certificates issued by SCEP
Diffstat (limited to 'check-certificates')
-rw-r--r--check-certificates4
1 files changed, 2 insertions, 2 deletions
diff --git a/check-certificates b/check-certificates
index d5dce80..350adc7 100644
--- a/check-certificates
+++ b/check-certificates
@@ -25,7 +25,7 @@
$LogPrintExit warning "Time is not yet synchronized." true;
}
-:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={
+:foreach Cert in=[ / certificate find where !revoked !ca !scep-url expires-after<3w ] do={
:local CertVal [ / certificate get $Cert ];
:do {
@@ -91,7 +91,7 @@
}
}
-:foreach Cert in=[ / certificate find where !revoked expires-after<2w fingerprint~"."] do={
+:foreach Cert in=[ / certificate find where !revoked !scep-url expires-after<2w fingerprint~"."] do={
:local CertVal [ / certificate get $Cert ];
:local ExpiresAfter [ $FormatExpire ($CertVal->"expires-after") ];