le-renew: do not delete after revocation

[home.git] / .bin / le-renew

diff --git a/.bin/le-renew b/.bin/le-renew
index cc008aab58a62ce7ba773358050b13f2c731ae91..58e687b0b7a34ca56356ed60efcbe3fc283515ce 100755 (executable)
--- a/.bin/le-renew
+++ b/.bin/le-renew
@@ -146,12 +146,13 @@ def process_domain(domain, dry_run=False):
                 return 0
             ret = 1
         # Try to revoke the old one.
-        cmd = ['certbot', 'revoke', '--cert-path', cert_path]
+        cmd = ['certbot', 'revoke', '--no-delete-after-revoke', '--cert-path',
+               cert_path]
         logging.info('%s: revoking old cert', domain)
-        logging.info('%s: %s', domain, cmd)
+        logging.info('%s: %s', domain, ' '.join(cmd))
         if not dry_run:
             try:
-                subprocess.check_call(cmd)
+                subprocess.check_call(cmd, stdin=open('/dev/null', 'r'))
             except subprocess.CalledProcessError:
                 logging.error('failed', exc_info=True)
     else: