Method IsExpiring

pkg/certs/certs.go:326–341

IsExpiring check if the certificate will expire in the configured duration

()

// IsExpiring check if the certificate will expire in the configured duration
func (pair *KeyPair) IsExpiring() (bool, *time.Time, error) {
	cert, err := pair.ParseCertificate()
	if err != nil {
		return true, nil, err
	}

	if time.Now().Before(cert.NotBefore) {
		return true, &cert.NotAfter, nil
	}
	expiringCheckThreshold := getCheckThreshold()
	if time.Now().Add(expiringCheckThreshold).After(cert.NotAfter) {
		return true, &cert.NotAfter, nil
	}

	return false, &cert.NotAfter, nil
}

// DoAltDNSNamesMatch checks if the certificate has all of the specified altDNSNames
func (pair *KeyPair) DoAltDNSNamesMatch(altDNSNames []string) (bool, error) {