# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1740419395 0
# Node ID 07b6a669f7f1d1e46a2f3554306db2cd5fad9a4b
# Parent  7c98981d3fe92a4f09491e8fe675cb06da0f5ed9# Parent  49bbdc22846d5e848a921e45901d305f929a13ec
Merge 13.0->trunk

diff -r 7c98981d3fe9 -r 07b6a669f7f1 core/certmanager.lua
--- a/core/certmanager.lua	Sat Feb 22 21:49:59 2025 +0100
+++ b/core/certmanager.lua	Mon Feb 24 17:49:55 2025 +0000
@@ -91,7 +91,7 @@
 				index_certs(full, files_by_name, depth_limit-1);
 			end
 		elseif file:find("%.crt$") or file:find("fullchain") then -- This should catch most fullchain files
-			local f = io_open(full);
+			local f, err = io_open(full);
 			if f then
 				-- TODO look for chained certificates
 				local firstline = f:read();
@@ -113,13 +113,17 @@
 								files_by_name[name] = { [full] = services; };
 							end
 						end
+					else
+						log("debug", "Skipping expired certificate: %s", full);
 					end
 				end
 				f:close();
+			elseif err then
+				log("debug", "Failed to open file for indexing: %s", full);
 			end
 		end
 	end
-	log("debug", "Certificate index: %q", files_by_name);
+	log("debug", "Certificate index in %s: %q", dir, files_by_name);
 	-- | hostname | filename | service |
 	return files_by_name;
 end