check-certificates: decrease the defaults for renewal and warning

https://letsencrypt.org/2025/12/02/from-90-to-45.html
This commit is contained in:
Christian Hesse 2026-02-24 15:03:44 +01:00
parent 349ebd5ad6
commit 8b88682d3d
3 changed files with 4 additions and 3 deletions

View file

@ -259,12 +259,12 @@
# Use this for certificate auto-renew
:global CertRenewUrl "";
#:global CertRenewUrl "https://example.com/certificates/";
:global CertRenewTime 3w;
:global CertRenewTime 2w;
:global CertRenewPass {
"v3ry-s3cr3t";
"4n0th3r-s3cr3t";
};
:global CertWarnTime 2w;
:global CertWarnTime 1w;
:global CertIssuedExportPass {
"cert1-cn"="v3ry-s3cr3t";
"cert2-cn"="4n0th3r-s3cr3t";

View file

@ -15,7 +15,7 @@
# Git commit id & info, expected configuration version
:global CommitId "unknown";
:global CommitInfo "unknown";
:global ExpectedConfigVersion 138;
:global ExpectedConfigVersion 139;
# global variables not to be changed by user
:global GlobalFunctionsReady false;

View file

@ -63,6 +63,7 @@
136="Introduced script 'check-perpetual-license' to check for license state on CHR.";
137="Added support to send notifications via Gotify (gotify.net).";
138="RouterOS 7.19 is suffering an issue with certificate store. Fixing trust state for all certificates...";
139="Certificate Authorities will reduce the leaf certificate validity times soon. Thus the defaults for renewal and warning in 'check-certificates' were decreased.";
};
# Migration steps to be applied on script updates