Certificate expiry is hardcoded to 90 days

[Sleepw4lker]

We are using acme.sh with a custom ACME server implementation.

We noticed that when using a certificate validity of less than 90 days in combination with renewal via cron job, the certificates won't get renewed.

Seems that the actual NotAfter of the certificate is not evaluated, but a hardcoded value of 90 days is bein used.

Actual certificate:

        Validity
            Not Before: Jul 30 08:10:24 2025 GMT
            Not After : Aug  1 08:10:24 2025 GMT

acme.sh:

Skipping. Next renewal time is: 2025-09-27T08:20:24Z

Kind regards

[github-actions]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

[Neilpang]

what commandline options did you use to issue the cert ?

[Sleepw4lker]

Issuance:

~/.acme.sh/acme.sh --server https://my-acme-server-fqdn:443/Internal/ACME/directory --keylength 3072 --issue -d my-servers-fqdn -w /var/www/html/ --force
~/.acme.sh/acme.sh -d my-servers-fqdn --install-cert --cert-file /etc/ssl/certs/my-servers-fqdn.pem --key-file /etc/ssl/private/my-servers-fqdn.key --reloadcmd "service apache2 restart"

Renewal:

36 4 * * * /root/.acme.sh/acme.sh --cron --home "/root/.acme.sh" --force > /dev/null