Try to add the new renew verb to integration testing

This commit is contained in:
Seth Schoen
2016-02-03 13:53:42 -08:00
parent 22adea60bf
commit a706f5c8c0
+15 -14
View File
@@ -44,20 +44,21 @@ common --domains le3.wtf install \
--cert-path "${root}/csr/cert.pem" \
--key-path "${root}/csr/key.pem"
# the following assumes that Boulder issues certificates for less than
# 10 years, otherwise renewal will not take place
cat <<EOF > "$root/conf/renewer.conf"
renew_before_expiry = 10 years
deploy_before_expiry = 10 years
EOF
letsencrypt-renewer $store_flags
dir="$root/conf/archive/le1.wtf"
for x in cert chain fullchain privkey;
do
latest="$(ls -1t $dir/ | grep -e "^${x}" | head -n1)"
live="$($readlink -f "$root/conf/live/le1.wtf/${x}.pem")"
[ "${dir}/${latest}" = "$live" ] # renewer fails this test
done
# This won't renew (because it's not time yet)
common renew
# This will renew
sed -i "4arenew_before_expiry = 10 years" "$root/conf/renewal/le1.wtf.conf"
common renew
# letsencrypt-renewer $store_flags
# dir="$root/conf/archive/le1.wtf"
# for x in cert chain fullchain privkey;
# do
# latest="$(ls -1t $dir/ | grep -e "^${x}" | head -n1)"
# live="$($readlink -f "$root/conf/live/le1.wtf/${x}.pem")"
# [ "${dir}/${latest}" = "$live" ] # renewer fails this test
# done
# revoke by account key
common revoke --cert-path "$root/conf/live/le.wtf/cert.pem"