check-certificates: decrease the defaults for renewal and warning

https://letsencrypt.org/2025/12/02/from-90-to-45.html
This commit is contained in:
Christian Hesse 2026-02-24 15:03:44 +01:00
parent 349ebd5ad6
commit 8b88682d3d
3 changed files with 4 additions and 3 deletions

View file

@ -259,12 +259,12 @@
# Use this for certificate auto-renew # Use this for certificate auto-renew
:global CertRenewUrl ""; :global CertRenewUrl "";
#:global CertRenewUrl "https://example.com/certificates/"; #:global CertRenewUrl "https://example.com/certificates/";
:global CertRenewTime 3w; :global CertRenewTime 2w;
:global CertRenewPass { :global CertRenewPass {
"v3ry-s3cr3t"; "v3ry-s3cr3t";
"4n0th3r-s3cr3t"; "4n0th3r-s3cr3t";
}; };
:global CertWarnTime 2w; :global CertWarnTime 1w;
:global CertIssuedExportPass { :global CertIssuedExportPass {
"cert1-cn"="v3ry-s3cr3t"; "cert1-cn"="v3ry-s3cr3t";
"cert2-cn"="4n0th3r-s3cr3t"; "cert2-cn"="4n0th3r-s3cr3t";

View file

@ -15,7 +15,7 @@
# Git commit id & info, expected configuration version # Git commit id & info, expected configuration version
:global CommitId "unknown"; :global CommitId "unknown";
:global CommitInfo "unknown"; :global CommitInfo "unknown";
:global ExpectedConfigVersion 138; :global ExpectedConfigVersion 139;
# global variables not to be changed by user # global variables not to be changed by user
:global GlobalFunctionsReady false; :global GlobalFunctionsReady false;

View file

@ -63,6 +63,7 @@
136="Introduced script 'check-perpetual-license' to check for license state on CHR."; 136="Introduced script 'check-perpetual-license' to check for license state on CHR.";
137="Added support to send notifications via Gotify (gotify.net)."; 137="Added support to send notifications via Gotify (gotify.net).";
138="RouterOS 7.19 is suffering an issue with certificate store. Fixing trust state for all certificates..."; 138="RouterOS 7.19 is suffering an issue with certificate store. Fixing trust state for all certificates...";
139="Certificate Authorities will reduce the leaf certificate validity times soon. Thus the defaults for renewal and warning in 'check-certificates' were decreased.";
}; };
# Migration steps to be applied on script updates # Migration steps to be applied on script updates