[PATCH datacenter-manager 14/16] daily-update: warn about certificates with excessive lifetimes

[Shannon Sterz <s.sterz@proxmox.com>]

long certificate lifetimes pose a risk, so warn about a certificate
that is valid for more than 3650 days, almost ten years.

Signed-off-by: Shannon Sterz <s.sterz@proxmox.com>
---
 server/src/bin/proxmox-datacenter-manager-daily-update.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server/src/bin/proxmox-datacenter-manager-daily-update.rs b/server/src/bin/proxmox-datacenter-manager-daily-update.rs
index 803b2fc0..f86187e6 100644
--- a/server/src/bin/proxmox-datacenter-manager-daily-update.rs
+++ b/server/src/bin/proxmox-datacenter-manager-daily-update.rs
@@ -116,6 +116,10 @@ async fn renew_self_signed_certificate() -> Result<(), Error> {
     } else if days <= 30 {
         log::info!("Certificate expires within 30 days.");
         // fixme: send_upcoming_self_signed_renewal_notification(earliest_renewal)?;
+    } else if days > 365 * 10 {
+        log::warn!(
+            "Self-signed certificate is valid for an excessive amount of time. Please renew it."
+        );
     }
 
     Ok(())
-- 
2.47.3