Commit graph

3457 commits

Author SHA1 Message Date
Christian Hesse
3a0a9f1129 Merge branch 'drop-builtin-trust-anchors' into next 2026-04-16 09:04:20 +02:00
Christian Hesse
f478123a77 mod/notification-email: use errors from command...
... instead of reading status from properties. This was introduced in
RouterOS 7.21beta2 (and we bump to 7.21 instead).
2026-04-16 09:04:20 +02:00
Christian Hesse
d2607d8fc3 INITIAL-COMMANDS: drop the old builtin-trust-anchors 2026-04-16 09:04:20 +02:00
Christian Hesse
d00a517c3b mod/ssh-keys-import: drop old property
The property name changed in RouterOS 7.21beta2, so bump required
version to 7.21.
2026-04-16 09:04:20 +02:00
Christian Hesse
924c8137a9 global-functions: $CertificateAvailable: drop the old builtin-trust-anchors 2026-04-16 09:04:20 +02:00
Christian Hesse
9a5fc63a3a README: drop the old builtin-trust-anchors 2026-04-16 09:04:20 +02:00
Christian Hesse
303d7565a2 ipv6-update: delay on parallel run...
... instead of just exiting. This makes sense for fast change
valid/invalid/valid, and also for several configured clients.
2026-04-16 09:01:51 +02:00
Christian Hesse
89b9c62e52 ipv6-update: support dhcpv6-client-lease script...
... by adding a provide, and handling global variable
$DHCPv6ClientLeaseVars.
2026-04-15 10:46:35 +02:00
Christian Hesse
3a66eb4192 introduce 'dhcpv6-client-lease' to run scripts on lease 2026-04-15 10:46:35 +02:00
Christian Hesse
e54a4572f7 rename lease-script -> dhcpv4-server-lease 2026-04-14 15:32:19 +02:00
Christian Hesse
6b3f3c1e46 news-and-changes: always end migration code with semicolon 2026-04-14 15:11:47 +02:00
Christian Hesse
736ff98bce doc/ipv6-update: remove extra dot 2026-04-10 20:27:02 +02:00
Christian Hesse
492edcd23f contrib/logo-color: mark the external link 2026-03-25 09:49:12 +01:00
Christian Hesse
d12d7da074 contrib/logo-color: update FireFox url 2026-03-25 09:45:35 +01:00
Christian Hesse
18463bc9d1 contrib/logo-color: use rsc.eworm.de, update screenshots ...
... with FireFox 149.0, which comes with graphical changes.
2026-03-25 09:35:49 +01:00
Christian Hesse
ded600ac4a CERTIFICATES: use rsc.eworm.de, update screenshots ...
... with FireFox 149.0, which comes with graphical changes.
2026-03-25 09:08:24 +01:00
Christian Hesse
8682e237c3 contrib/html: strip question mark from anchor 2026-03-19 14:38:43 +01:00
Christian Hesse
65febff022 contrib/html: break the line 2026-03-19 14:38:43 +01:00
Christian Hesse
65f101eb48 doc/dhcp-to-dns: add a note on reverse lookup
https://github.com/eworm-de/routeros-scripts/discussions/94
https://github.com/eworm-de/routeros-scripts/issues/104
https://github.com/eworm-de/routeros-scripts/issues/120

... and possibly more.
2026-03-19 11:39:31 +01:00
Christian Hesse
6d5274c5b1 check-certificates: change order of conditions...
... to better match both loops.
2026-03-19 09:51:57 +01:00
Christian Hesse
87f7495534 check-certificates: try renew with common-name or subject-alt-name only
One of these is required to assemble the url.
2026-03-19 09:51:57 +01:00
Christian Hesse
428478e690 dhcp-to-dns: remove unused variable 2026-03-16 11:19:25 +01:00
Christian Hesse
460508c931 Merge branch 'check-certificates' into next 2026-03-12 11:35:41 +01:00
Christian Hesse
6aebf5720d check-certificates: give the name used for fetch 2026-03-12 11:35:41 +01:00
Christian Hesse
22c3f70dab check-certificates: match status code in error message
The message used to be:

    Fetch failed with status 404

... but changed recently:

    failure: Status 404, NOT FOUND

The new string is in RouterOS 7.22, and changed in what ever
beta or rc release. Let's just match the status code and hope
for the best.
2026-03-12 11:35:41 +01:00
Christian Hesse
0d5ee6cf23 check-certificates: skip common-name if not available 2026-03-12 11:35:41 +01:00
Christian Hesse
491189ece4 doc/check-certificates: create example certificate with SAN 2026-03-12 11:05:24 +01:00
Christian Hesse
538071631d global-functions: $ScriptInstallUpdate: warn when script exists...
... but is requested to be added.
2026-03-12 10:56:21 +01:00
Christian Hesse
76ae9686cf fw-addr-lists: raw.githubusercontent.com requires 'ISRG Root X1' now 2026-03-12 10:56:21 +01:00
Christian Hesse
fa16e79746 mod/notification-email: suppress another racy condition 2026-03-10 13:13:03 +01:00
Christian Hesse
2567c332de mod/notification-email: always use :find for scheduler
This is still racy... Try to improve.
2026-03-10 13:13:03 +01:00
Christian Hesse
51ec9dafb9 check-certificates: decrease the defaults for renewal and warning
https://letsencrypt.org/2025/12/02/from-90-to-45.html
2026-03-10 13:13:03 +01:00
Christian Hesse
349ebd5ad6 global-functions: $Grep: use length from variable 2026-02-23 08:57:02 +01:00
Christian Hesse
eecc8c6126 global-functions: $Grep: add comment on :deserialize 2026-02-23 08:57:02 +01:00
Christian Hesse
a3c815c2ca update list of contributors 2026-02-23 08:57:02 +01:00
Christian Hesse
d8632ad370 update list of contributors 2026-02-19 08:57:31 +01:00
Christian Hesse
68ed97205c check-certificates: update wording, indent output 2026-02-05 08:21:36 +01:00
Christian Hesse
d0f50142f5 check-certificates: show days valid in details 2026-02-05 08:21:36 +01:00
Christian Hesse
3ee1978098 Merge branch 'certificate-builtin' into next 2026-01-27 15:47:19 +01:00
Christian Hesse
70ddc152de bump required RouterOS version for all scripts 2026-01-27 15:47:19 +01:00
Christian Hesse
b62594279d README: add a screenshot for builtin trust store 2026-01-27 15:47:19 +01:00
Christian Hesse
3f8de22d2a README: make the trust store a separate section 2026-01-27 15:47:19 +01:00
Christian Hesse
ae30574e86 README: reword the hint on builtin trust store 2026-01-27 15:47:19 +01:00
Christian Hesse
e359b3a176 global-functions: $CertificateAvailable: drop the compatibility workaround...
... and make it depend in RouterOS 7.19 and its builtin certificates.
2026-01-27 15:47:19 +01:00
Christian Hesse
baa8d6c974 INITIAL-COMMANDS: drop the compatibility workaround...
... and make it depend in RouterOS 7.19 and its builtin certificates.
2026-01-27 15:47:19 +01:00
Christian Hesse
a7be27aea9 check-certificates: drop the compatibility workaround...
... and make it depend in RouterOS 7.19 and its builtin certificates.
2026-01-27 15:47:19 +01:00
Christian Hesse
8b3346ec7e certs: drop 'Certum Trusted Network CA'...
... as it is no longer used.
2026-01-27 15:47:16 +01:00
Christian Hesse
a2298c2c76 certs: drop 'DigiCert Global Root G2'...
... as it is no longer used by Cloudflare.
2026-01-27 15:47:14 +01:00
Christian Hesse
70d743bcda certs: check gitlab.com ...
... as it is mentioned in global-config.
2026-01-27 12:43:19 +01:00
Christian Hesse
4ec1da1c91 certs: add combined file for GTS Root R1 & GTS Root R4...
... to make the checks happy.

This is a follow-up on:

* netwatch-dns: support multiple certificates
  0fffb5198e

* doc/netwatch-dns: give hint on multiple certificates
  92759fcca5
2026-01-27 12:33:09 +01:00