diff --git a/doc/testssl.1 b/doc/testssl.1 index 1a7c5f2..3cd46b8 100644 --- a/doc/testssl.1 +++ b/doc/testssl.1 @@ -1,4 +1,4 @@ -.\" Automatically generated by Pandoc 3.7.0.2 +.\" Automatically generated by Pandoc 3.10 .\" .TH "" "" "" "" .SS NAME @@ -1147,6 +1147,16 @@ DAYS2WARN2 is the second threshold when you\(cqll be warning of a certificate expiration of a host, preset to 30 (days). For Let\(cqs Encrypt this value will be divided internally by 2. .IP \(bu 2 +DAYS_VALID_SHORTLIVED is preset to 10 (days). +Certificates with a total validity period (notAfter \- notBefore) of +this many days or fewer are treated as intentionally short\-lived (see +\(lqShort\-lived Subscriber Certificate\(rq in the CA/Browser Forum +Baseline Requirements, e.g.\ Let\(cqs Encrypt\(cqs 6\-day profile). +They are not being warned of for their short lifespan. +A warning is issued only when less than 24 hours of validity are left, +and only for certificates whose total validity period is more than 24 +hours. +.IP \(bu 2 TESTSSL_INSTALL_DIR is the derived installation directory of testssl.sh. Relatively to that the \f[CR]bin\f[R] and mandatory \f[CR]etc\f[R] directory will be looked for. diff --git a/doc/testssl.1.html b/doc/testssl.1.html index 06a0010..90dfde5 100644 --- a/doc/testssl.1.html +++ b/doc/testssl.1.html @@ -988,6 +988,15 @@
bin and
mandatory etc directory will be looked for.