cert-checker: Exit non-zero on check failure (#8759)

beautifulentropy · web-flow · commit 2517a8f9a031 · 2026-05-26T13:03:54.000-04:00
Fixes #8748
diff --git a/cmd/cert-checker/main.go b/cmd/cert-checker/main.go
@@ -680,6 +680,10 @@ func main() {
 	)
 	err = checker.issuedReport.dump()
 	cmd.FailOnError(err, "Failed to dump results: %s\n")
+
+	if checker.issuedReport.BadCerts > 0 {
+		os.Exit(1)
+	}
 }
 
 func init() {
diff --git a/test/config-next/cert-checker.json b/test/config-next/cert-checker.json
@@ -11,6 +11,7 @@
 		"checkPeriod": "72h",
 		"acceptableValidityDurations": [
 			"7776000s",
+			"583200s",
 			"160h"
 		],
 		"lintConfig": "test/config-next/zlint.toml",
diff --git a/test/config/cert-checker.json b/test/config/cert-checker.json
@@ -11,6 +11,7 @@
 		"checkPeriod": "72h",
 		"acceptableValidityDurations": [
 			"7776000s",
+			"583200s",
 			"160h"
 		],
 		"ignoredLints": [

Original file line number	Diff line number	Diff line change
`@@ -680,6 +680,10 @@ func main() {`
`680`	`680`	`)`
`681`	`681`	`err = checker.issuedReport.dump()`
`682`	`682`	`cmd.FailOnError(err, "Failed to dump results: %s\n")`
	`683`	`+`
	`684`	`+ if checker.issuedReport.BadCerts > 0 {`
	`685`	`+ os.Exit(1)`
	`686`	`+ }`
`683`	`687`	`}`
`684`	`688`
`685`	`689`	`func init() {`