AWS SSL证书在过期前会自动续订,并且新证书将在旧证书过期前几天发出,所以在一定时间内会存在新旧证书共存的情况。
您可以使用以下代码示例来检查续订和过期时间是否有重叠:
import datetime import boto3
client = boto3.client('acm')
cert_arn = 'arn:aws:acm:region:account-id:certificate/certificate-id' cert_details = client.describe_certificate(CertificateArn=cert_arn)
issued_time = cert_details['Certificate']['CreatedAt'].replace(tzinfo=None)
expiry_time = cert_details['Certificate']['NotAfter'].replace(tzinfo=None)
renewal_time = expiry_time - datetime.timedelta(days=30)
if renewal_time >= issued_time and renewal_time <= expiry_time: print("There is overlap between renewal and expiry time") else: print("There is no overlap between renewal and expiry time")