summaryrefslogtreecommitdiff
path: root/modules/foundation/www/tailnet.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/foundation/www/tailnet.nix')
-rw-r--r--modules/foundation/www/tailnet.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/modules/foundation/www/tailnet.nix b/modules/foundation/www/tailnet.nix
index e7ec0e8..01fa156 100644
--- a/modules/foundation/www/tailnet.nix
+++ b/modules/foundation/www/tailnet.nix
@@ -24,7 +24,9 @@ let
pem=$1
${pkgs.openssl}/bin/openssl x509 \
-checkend ${toString oneWeekInSeconds} \
- -noout <$pem
+ -noout <$pem &&
+ [ "$(${pkgs.openssl}/bin/openssl x509 -pubkey -noout <$pem)" \
+ = "$(${pkgs.openssl}/bin/openssl pkey -pubout <out/key.pem)" ]
}
try_renew() {