Commit graph

3500 commits

Author SHA1 Message Date
Christian Hesse
4c5be0c7be doc/check-perpetual-license: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
edcafc8fc0 doc/check-lte-firmware-upgrade: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
b79d559ca8 doc/check-health: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
442b9f1171 doc/check-certificates: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
7f5b053b4d doc/backup-upload: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
da8f3abfc8 doc/backup-cloud: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
813db8aad1 README: start image alt text with 'notification:' or 'screenshot:' 2026-05-19 15:21:37 +02:00
Christian Hesse
0eca62bab8 contrib/html: give the head table a class 2026-05-19 15:21:36 +02:00
Christian Hesse
861c6db278 contrib/html: enclose content in span tag with class 2026-05-19 15:21:36 +02:00
Christian Hesse
727a92738c bump required RouterOS version for all scripts 2026-05-14 23:01:23 +02:00
Christian Hesse
baf819b751 Merge branch 'drop-builtin-trust-anchors' into next 2026-05-14 23:01:23 +02:00
Christian Hesse
13c2616453 mod/notification-email: get property by name
This works now that we require RouterOS 7.21 anyway.
2026-05-14 23:01:23 +02:00
Christian Hesse
d960af89ce INITIAL-COMMANDS: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
ac3346b5f6 mod/notification-email: use errors from command...
... instead of reading status from properties. This was introduced in
RouterOS 7.21beta2 (and we bump to 7.21 instead).
2026-05-14 23:01:23 +02:00
Christian Hesse
333b214fd8 global-functions: $CertificateDownload: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
ed3b4cdb53 Merge branch 'toarray-delimiter' into next 2026-05-14 23:01:23 +02:00
Christian Hesse
3b1ce63c06 global-functions: $CertificateAvailable: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
bbc2d5df2e check-health: use :toarray's new delimiter= 2026-05-14 23:01:23 +02:00
Christian Hesse
bd6b5294b8 README: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
34a4d70f24 fw-addr-lists: get both Let's Encrypt certificates for rsc.eworm.de 2026-05-14 23:01:23 +02:00
Christian Hesse
bf46f980aa fw-addr-lists: support giving several certificates...
... by delimiting with a colon.
2026-05-14 23:01:23 +02:00
Christian Hesse
c42709cd9b netwatch-dns: use :toarray's new delimiter= to split cert names
The new delimiter= parameter for :toarray with introduced in
RouterOS 7.21.
2026-05-14 23:01:23 +02:00
Christian Hesse
d586205a70 Info on Let's Encrypt change
> Let's Encrypt's Gen Y (YE and YR bulleted below) Cross-Certified
> Subordinate CAs were issued in violation of CCADB policy which requires
> that the serverAuth EKU extension MUST be present in cross-signed
> intermediate certificates issued since June 15th 2025. Root YE and
> YR were issued September 3rd 2025 and are subject to the requirements.

https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105
2026-05-14 22:59:07 +02:00
Christian Hesse
71c190b478 Merge branch 'lets-encrypt-old-chain' into next 2026-05-13 16:19:11 +02:00
Christian Hesse
a3de8aa081 global-functions: $CleanName: add missing colon 2026-05-13 16:19:11 +02:00
Christian Hesse
2a6567135e INITIAL-COMMANDS: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
7ad60ac704 README: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
59e0c4460e certs: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
6f2eb69ee0 global-functions: $ScriptInstallUpdate: Check for both LE certificates
Hmm... 🤨 Let's Encrypt is doing crazy things. My server was switched to
'Root YE' alredy, now it is back to 'ISRG Root X2'... 😳

So let's check for both for now.
2026-05-13 16:19:11 +02:00
Christian Hesse
73f15a2df0 global-functions: $RmFile: ignore "no such item"...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
57385b5934 global-functions: $RmDir: ignore "no such item"...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
74d3fc2933 global-functions: $RmFile: remove with find...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
875df5da76 global-functions: $RmDir: remove with find...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
3aaba1f408 netwatch-dns: check with eworm.de and eworm.net
This should prevent against DENIC outages...

https://blog.denic.de/en/denic-reports-resolved-dnssec-disruption-affecting-de-domains/
2026-05-06 16:15:17 +02:00
Christian Hesse
0ef11bf11d global-functions: $IsDNSResolving: check with :retry 2026-05-06 16:15:17 +02:00
Christian Hesse
811df5abf2 global-functions: $IsDNSResolving: check with eworm.de and eworm.net
This should prevent against DENIC outages...

https://blog.denic.de/en/denic-reports-resolved-dnssec-disruption-affecting-de-domains/
2026-05-06 10:01:39 +02:00
Christian Hesse
cd4052ba6b Merge branch 'backup-filename-date' into next 2026-04-28 16:37:09 +02:00
Christian Hesse
2f5aa2f337 backup-{email,upload}: add setting in configuration 2026-04-28 16:36:45 +02:00
Christian Hesse
2f621a5981 backup-upload: drop the GMT offset from filename...
... as it is of little help only. Also it is ambiguous due
to signdness being dropped when cleaning the name.
2026-04-28 16:36:31 +02:00
Christian Hesse
fd956519e2 backup-email: drop the GMT offset from filename...
... as it is of little help only. Also it is ambiguous due
to signdness being dropped when cleaning the name.
2026-04-28 16:36:31 +02:00
Christian Hesse
0382a368ec backup-upload: support date & time in filename 2026-04-28 16:36:31 +02:00
Christian Hesse
d54a0d541d backup-email: support date & time in filename 2026-04-28 16:36:31 +02:00
Christian Hesse
174e16502a global-config: update comment on backup options 2026-04-28 16:36:15 +02:00
Christian Hesse
11dc1e2aa1 ipv6-update: log dynamic entry with info, not warning 2026-04-24 14:28:25 +02:00
Christian Hesse
1f460b5bae mod/notification-email: add setting for certificate verification 2026-04-23 09:17:42 +02:00
Christian Hesse
f5dbc27a01 global-functions: $CertificateDownload: extend the check for builtin certificates 2026-04-23 09:17:42 +02:00
Christian Hesse
f69925e537 global-functions: $CertificateAvailable: warn on undefined intended use 2026-04-23 09:17:42 +02:00
Christian Hesse
885129d650 contrib/telegram: add note for dhcpv6-client-lease 2026-04-23 09:17:42 +02:00
Christian Hesse
d00a517c3b mod/ssh-keys-import: drop old property
The property name changed in RouterOS 7.21beta2, so bump required
version to 7.21.
2026-04-16 09:04:20 +02:00
Christian Hesse
303d7565a2 ipv6-update: delay on parallel run...
... instead of just exiting. This makes sense for fast change
valid/invalid/valid, and also for several configured clients.
2026-04-16 09:01:51 +02:00