Do not log renewal checks for invalid certificates.

Author: bavshin-f5

src/lib.rs

@@ -285,10 +285,14 @@ async fn ngx_http_acme_update_certificates_for_issuer(
         {
             let locked = cert.read();
 
+            if !locked.is_valid() {
+                continue;
+            }
+
             if !locked.is_renewable() {
                 ngx_log_debug!(
                     log.as_ptr(),
-                    "acme: certificate \"{}/{}\" is not renewable",
+                    "acme: certificate \"{}/{}\" is not due for renewal",
                     issuer.name,
                     order.cache_key()
                 );

src/state/certificate.rs

@@ -243,7 +243,11 @@ where
     }
 
     pub fn is_renewable(&self) -> bool {
-        !matches!(self.state, CertificateState::Invalid { .. }) && Time::now() >= self.next
+        self.is_valid() && Time::now() >= self.next
+    }
+
+    pub fn is_valid(&self) -> bool {
+        !matches!(self.state, CertificateState::Invalid { .. })
     }
 }