From: Martin Geiseler <hallo@tralafiti.de>
Date: Sun, 6 Dec 2015 12:51:40 +0000 (+0100)
Subject: Check expire date of existing certs
X-Git-Tag: v0.1.0~206
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5060dea068e2e6f7127f2f5771668a2331554db7;p=thirdparty%2Fdehydrated.git

Check expire date of existing certs
---

diff --git a/letsencrypt.sh b/letsencrypt.sh
index e822df9..410d59c 100755
--- a/letsencrypt.sh
+++ b/letsencrypt.sh
@@ -184,7 +184,18 @@ if [[ "${register}" = "1" ]]; then
   signed_request "${CA}/acme/new-reg" '{"resource": "new-reg", "agreement": "'"$LICENSE"'"}' > /dev/null
 fi
 
-# Generate certificates for all domains found in domain.txt (TODO: check if certificate already exists and is about to expire)
+# Generate certificates for all domains found in domain.txt. Check if existing certificate are about to expire
 <domains.txt sed 's/^\s*//g;s/\s*$//g' | grep -v '^#' | grep -v '^$' | while read -r line; do
+  domain="$(echo $line | cut -d' ' -f1)"
+  if [[ -e "certs/${domain}/cert.pem" ]]; then
+    echo -n "Found existing cert for ${domain}. Expire date ..."
+    set +e; openssl x509 -checkend 1209600 -noout -in "certs/${domain}/cert.pem"; expiring=$?; set -e
+    if [[ ${expiring} -eq 0 ]]; then
+        echo " is not within 2 weeks. Skipping"
+        continue
+    fi
+    echo " is within 2 weeks. Renewing..."
+  fi
+
   sign_domain $line
 done