diff options
author | Bob Beck <beck@cvs.openbsd.org> | 2020-11-18 20:54:44 +0000 |
---|---|---|
committer | Bob Beck <beck@cvs.openbsd.org> | 2020-11-18 20:54:44 +0000 |
commit | 2b853ac4e431b56ba6be64bc449f2a4190bb4c22 (patch) | |
tree | 1562e52c8f695fdd45cba388f4e7aa0bdc3597ee /usr.sbin/acme-client | |
parent | 6ab17965afc28eb53005b2bf1eb096ccf834a42f (diff) |
Do not check the list of SAN's in the cert when -F is specified to force renewal
This allows you to add a SAN DNS name to a cert, and request a forced renewal
to get the new name added immediately
ok florian@
Diffstat (limited to 'usr.sbin/acme-client')
-rw-r--r-- | usr.sbin/acme-client/revokeproc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/acme-client/revokeproc.c b/usr.sbin/acme-client/revokeproc.c index ce67174b5a5..c596683e2e6 100644 --- a/usr.sbin/acme-client/revokeproc.c +++ b/usr.sbin/acme-client/revokeproc.c @@ -1,4 +1,4 @@ -/* $Id: revokeproc.c,v 1.15 2019/06/16 19:49:13 florian Exp $ */ +/* $Id: revokeproc.c,v 1.16 2020/11/18 20:54:43 beck Exp $ */ /* * Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv> * @@ -239,7 +239,7 @@ revokeproc(int fd, const char *certfile, int force, } } - for (j = 0; j < altsz; j++) { + for (j = 0; !force && j < altsz; j++) { if (found[j]) continue; warnx("%s: domain not listed: %s", certfile, alts[j]); |