summaryrefslogtreecommitdiff
path: root/usr.sbin/acme-client
diff options
context:
space:
mode:
authorBob Beck <beck@cvs.openbsd.org>2020-11-18 20:54:44 +0000
committerBob Beck <beck@cvs.openbsd.org>2020-11-18 20:54:44 +0000
commit2b853ac4e431b56ba6be64bc449f2a4190bb4c22 (patch)
tree1562e52c8f695fdd45cba388f4e7aa0bdc3597ee /usr.sbin/acme-client
parent6ab17965afc28eb53005b2bf1eb096ccf834a42f (diff)
Do not check the list of SAN's in the cert when -F is specified to force renewal
This allows you to add a SAN DNS name to a cert, and request a forced renewal to get the new name added immediately ok florian@
Diffstat (limited to 'usr.sbin/acme-client')
-rw-r--r--usr.sbin/acme-client/revokeproc.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/acme-client/revokeproc.c b/usr.sbin/acme-client/revokeproc.c
index ce67174b5a5..c596683e2e6 100644
--- a/usr.sbin/acme-client/revokeproc.c
+++ b/usr.sbin/acme-client/revokeproc.c
@@ -1,4 +1,4 @@
-/* $Id: revokeproc.c,v 1.15 2019/06/16 19:49:13 florian Exp $ */
+/* $Id: revokeproc.c,v 1.16 2020/11/18 20:54:43 beck Exp $ */
/*
* Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv>
*
@@ -239,7 +239,7 @@ revokeproc(int fd, const char *certfile, int force,
}
}
- for (j = 0; j < altsz; j++) {
+ for (j = 0; !force && j < altsz; j++) {
if (found[j])
continue;
warnx("%s: domain not listed: %s", certfile, alts[j]);