Dry run testable

letsencrypt/cli.py

@@ -708,7 +708,10 @@ def prepare_and_parse_args(plugins, args, detect_defaults=False):
         " any servers that were stopped by --pre-hook.")
     helpful.add(
         "renew", "--renew-hook",
-        help="Command to be run in a shell once for each renewed certificate")
+        help="Command to be run in a shell once for each renewed certificate."
+        "For this command, the shell variable $RENEWED_LINEAGE will point to the"
+        "config live subdirectory containing the new certs and keys; the shell variable "
+        "$RENEWED_DOMAINS will conatain a space-delimited list of renewed cert domains")
 
     helpful.add_deprecated_argument("--agree-dev-preview", 0)
 

letsencrypt/renewal.py

@@ -244,7 +244,8 @@ def renew_cert(config, domains, le_client, lineage):
         renewal_conf = configuration.RenewerConfiguration(config.namespace)
         lineage.save_successor(prior_version, new_cert, new_key.pem, new_chain, renewal_conf)
         lineage.update_all_links_to(lineage.latest_common_version())
-        hooks.renew_hook(config, domains, lineage.live_dir)
+
+    hooks.renew_hook(config, domains, lineage.live_dir)
     # TODO: Check return value of save_successor