From 1b232d906f603f52c2858ca3b3488610dd0c3f9f Mon Sep 17 00:00:00 2001
From: fbt <fbt@fleshless.org>
Date: Fri, 27 May 2016 13:36:04 +0300
Subject: [PATCH] fail statefile

---
 le-renew | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/le-renew b/le-renew
index 380e955..d9713a1 100755
--- a/le-renew
+++ b/le-renew
@@ -70,6 +70,11 @@ main() {
 		return 1
 	fi
 
+	if [[ -f "$cfg_dir/domains/$certname/renew.fail" ]]; then
+		err "Fail flag exists: $cfg_dir/domains/$certname/renew.fail, not attempting renew."
+		return 2
+	fi
+
 	if ! openssl x509 -checkend "$checkend_seconds" < "$cfg_dir/domains/$certname/certificate.pem"; then
 		if ! (( "${#domains[@]}" )); then
 			if [[ -f "$cfg_dir/domains/$certname/renew.cfg" ]]; then
@@ -83,7 +88,9 @@ main() {
 			le_args+=( '-d' "$d" )
 		done
 
-		le "${le_args[@]}"
+		if ! le "${le_args[@]}"; then
+			> "$cfg_dir/domains/$certname/renew.fail"
+		fi
 	fi
 }