Add optional issuerKey to Cache.RemoveManaged

Author: mholt

cache.go

@@ -395,16 +395,19 @@ func (certCache *Cache) AllMatchingCertificates(name string) []Certificate {
 }
 
 // RemoveManaged removes managed certificates for the given subjects from the cache.
-// This effectively stops maintenance of those certificates.
-func (certCache *Cache) RemoveManaged(subjects []string) {
+// This effectively stops maintenance of those certificates. Optionally pass an issuer
+// key to remove only certs managed with a certain issuer.
+func (certCache *Cache) RemoveManaged(subjects []string, issuerKey string) {
 	deleteQueue := make([]string, 0, len(subjects))
 	for _, subject := range subjects {
 		certs := certCache.getAllMatchingCerts(subject) // does NOT expand wildcards; exact matches only
 		for _, cert := range certs {
 			if !cert.managed {
 				continue
 			}
-			deleteQueue = append(deleteQueue, cert.hash)
+			if issuerKey == "" || cert.issuerKey == issuerKey {
+				deleteQueue = append(deleteQueue, cert.hash)
+			}
 		}
 	}
 	certCache.Remove(deleteQueue)