diff --git a/doc/testssl.1 b/doc/testssl.1 index 1a7c5f2..3cd46b8 100644 --- a/doc/testssl.1 +++ b/doc/testssl.1 @@ -1,4 +1,4 @@ -.\" Automatically generated by Pandoc 3.7.0.2 +.\" Automatically generated by Pandoc 3.10 .\" .TH "" "" "" "" .SS NAME @@ -1147,6 +1147,16 @@ DAYS2WARN2 is the second threshold when you\(cqll be warning of a certificate expiration of a host, preset to 30 (days). For Let\(cqs Encrypt this value will be divided internally by 2. .IP \(bu 2 +DAYS_VALID_SHORTLIVED is preset to 10 (days). +Certificates with a total validity period (notAfter \- notBefore) of +this many days or fewer are treated as intentionally short\-lived (see +\(lqShort\-lived Subscriber Certificate\(rq in the CA/Browser Forum +Baseline Requirements, e.g.\ Let\(cqs Encrypt\(cqs 6\-day profile). +They are not being warned of for their short lifespan. +A warning is issued only when less than 24 hours of validity are left, +and only for certificates whose total validity period is more than 24 +hours. +.IP \(bu 2 TESTSSL_INSTALL_DIR is the derived installation directory of testssl.sh. Relatively to that the \f[CR]bin\f[R] and mandatory \f[CR]etc\f[R] directory will be looked for. diff --git a/doc/testssl.1.html b/doc/testssl.1.html index 06a0010..90dfde5 100644 --- a/doc/testssl.1.html +++ b/doc/testssl.1.html @@ -988,6 +988,15 @@
  • DAYS2WARN2 is the second threshold when you’ll be warning of a certificate expiration of a host, preset to 30 (days). For Let’s Encrypt this value will be divided internally by 2.
  • +
  • DAYS_VALID_SHORTLIVED is preset to 10 (days). Certificates + with a total validity period (notAfter - notBefore) of this many + days or fewer are treated as intentionally short-lived (see + “Short-lived Subscriber Certificate” in the CA/Browser Forum + Baseline Requirements, e.g. Let’s Encrypt’s 6-day profile). They + are not being warned of for their short lifespan. A warning is + issued only when less than 24 hours of validity are left, and + only for certificates whose total validity period is more than + 24 hours.
  • TESTSSL_INSTALL_DIR is the derived installation directory of testssl.sh. Relatively to that the bin and mandatory etc directory will be looked for.