check-certificates: exclude certificates issued by SCEP

This commit is contained in:
Christian Hesse 2020-03-20 22:03:31 +01:00
parent 1cde38e2da
commit 1282a91f04

View file

@ -25,7 +25,7 @@
$LogPrintExit warning "Time is not yet synchronized." true;
}
:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={
:foreach Cert in=[ / certificate find where !revoked !ca !scep-url expires-after<3w ] do={
:local CertVal [ / certificate get $Cert ];
:do {
@ -91,7 +91,7 @@
}
}
:foreach Cert in=[ / certificate find where !revoked expires-after<2w fingerprint~"."] do={
:foreach Cert in=[ / certificate find where !revoked !scep-url expires-after<2w fingerprint~"."] do={
:local CertVal [ / certificate get $Cert ];
:local ExpiresAfter [ $FormatExpire ($CertVal->"expires-after") ];