check-certificates: try renew with common-name or subject-alt-name only

One of these is required to assemble the url.
This commit is contained in:
Christian Hesse 2026-03-19 09:43:18 +01:00
parent 428478e690
commit 87f7495534

View file

@ -164,7 +164,8 @@
}
$WaitFullyConnected;
:foreach Cert in=[ /certificate/find where !revoked !ca !scep-url expires-after<$CertRenewTime ] do={
:foreach Cert in=[ /certificate/find where !revoked !ca !scep-url expires-after<$CertRenewTime \
(common-name or subject-alt-name) ] do={
:local CertVal [ /certificate/get $Cert ];
:local LastName;
:local FetchName;