Christian Hesse
80746d4dad
mod/ssh-keys-import: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
b7df0d393a
mod/scriptrunonce: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
5f8f5e22a7
mod/notification-telegram: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
969658da16
mod/notification-ntfy: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
6dd37e45d6
mod/notification-matrix: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
ddf7a015c5
mod/notification-gotify: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
d4624689ae
mod/notification-email: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
2366122a36
mod/ipcalc: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
c0e802eab9
mod/inspectvar: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
345c8ef6b2
mod/bridge-port-vlan: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
920785c25b
mod/bridge-port-to: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
87b80e05cb
accesslist-duplicates: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
d0f2ae0033
global-functions: $SendNotification: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
f3d81f7e0d
global-functions: $ScriptInstallUpdate: use $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
5443034897
global-functions: make $ExitError a wrapper for $ExitOnError
2026-01-21 08:57:17 +01:00
Christian Hesse
a8e091dde7
global-functions: introduce $ExitOnError
...
This is just like $ExitError, but first parameter is dropped. We will
not need it now that we can exit a script with :exit.
2026-01-21 08:57:17 +01:00
Christian Hesse
0db4306795
global-functions: enable scheduler if disabled
2026-01-21 08:57:17 +01:00
Christian Hesse
86bf200bb5
global-functions: simplify the scheduler fix
2026-01-21 08:57:17 +01:00
Christian Hesse
ad8299824c
global-functions: make the scheduler fix a block
2026-01-21 08:57:17 +01:00
Christian Hesse
8b3fae745d
global-functions: $NetMask6: drop unused variable
2026-01-21 08:57:17 +01:00
Christian Hesse
84fbe96b82
README: reword the section on device-mode
...
Now that we require RouterOS 7.17 *all* devices come with the
updated device-mode.
2026-01-20 19:14:41 +01:00
Christian Hesse
b7a5402be6
introduce 'global-functions.d/deprecated' for deprecated functions
2026-01-20 09:53:24 +01:00
Christian Hesse
28b1297a43
global-functions: $ScriptInstallUpdate: trigger reload on changed snippet
2026-01-20 09:51:05 +01:00
Christian Hesse
72660f21a5
check-certificates: print warning on $CertRenewUrl just once
2026-01-19 16:37:20 +01:00
Christian Hesse
f1333087d2
mode-button: drop unused variable $ExitOK
2026-01-19 14:55:19 +01:00
Christian Hesse
e6542ba8cc
accesslist-duplicates: drop unused variable $ExitOK
2026-01-19 14:54:32 +01:00
Christian Hesse
883a442ff5
Merge branch 'lets-encrypt-gen-y' into next
2026-01-17 16:59:01 +01:00
Christian Hesse
7716bb9d6c
fw-addr-lists: rsc.eworm.de requires 'Root YE'
2026-01-17 16:58:16 +01:00
Christian Hesse
ced6bf2c11
INITIAL-COMMANDS: update for new Let's Encrypt CA 'Root YE'
2026-01-17 16:58:16 +01:00
Christian Hesse
6e8e841906
README: update for new Let's Encrypt CA 'Root YE'
2026-01-17 16:58:16 +01:00
Christian Hesse
9919b9fe76
global-functions: $ScriptInstallUpdate: get new Let's Encrypt CA 'Root YE'
2026-01-17 16:58:16 +01:00
Christian Hesse
68a4ac942e
certs: update *.eworm.de for new Let's Encrypt 'Root YE'
2026-01-17 16:58:16 +01:00
Christian Hesse
244eceafee
certs: add Let's Encrypt 'Root YR' for future use
...
https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
2026-01-17 16:58:16 +01:00
Christian Hesse
aebe7bd054
certs: add Let's Encrypt 'Root YE' for future use
...
https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
2026-01-17 16:58:16 +01:00
Christian Hesse
6468c24d61
update list of contributors
2026-01-17 16:57:50 +01:00
Christian Hesse
fd4bf59bae
Merge branch 'certificates' into next
2026-01-17 16:57:34 +01:00
Christian Hesse
b52936e946
doc/netwatch-dns: mention ip address...
...
... which can be used for serveral services that have it in SAN.
2026-01-17 16:52:20 +01:00
Christian Hesse
92759fcca5
doc/netwatch-dns: give hint on multiple certificates
2026-01-16 14:48:18 +01:00
Christian Hesse
ad310e6573
doc/netwatch-dns: always use the same order for examples
2026-01-16 14:48:18 +01:00
Christian Hesse
c0c1c5521e
doc/netwatch-dns: include examples for dns.quad9.net & dns.google
2026-01-16 14:48:02 +01:00
Christian Hesse
0fffb5198e
netwatch-dns: support multiple certificates
...
Some services use certificates issued by differnt CA certificates,
depending on geolocation. One example is dns.google, which may require
either of 'GTS Root R1' or 'GTS Root R4'.
/tool/netwatch/add comment="doh, dns, name=google-dns-ipv4, doh-cert=GTS Root R1:GTS Root R4" host=8.8.8.8 type=simple;
2026-01-16 13:52:18 +01:00
Christian Hesse
330a616406
check-certificates: abort renew if "new" certificate is older...
...
... and drop the condition on $CertRenewTime.
2026-01-16 13:41:10 +01:00
Christian Hesse
0fee5cea3c
check-certificates: move the warning below check for key
2026-01-16 13:41:10 +01:00
Christian Hesse
d673f0956c
global-functions: $CertificateAvailable: get missing certificate...
...
... not the issued and available one.
2026-01-16 00:32:49 +01:00
Christian Hesse
ad455c8f1d
doc/netwatch-dns: cloudflare uses a new CA for certificates
2026-01-15 23:14:37 +01:00
Christian Hesse
b72a79824e
certs: add 'SSL.com Root Certification Authority ECC'...
...
... to use with Cloudflare DNS.
curl -d '["SSL.com Root Certification Authority ECC"]' https://mkcert.org/generate/ | grep -v '^$' > certs/SSL-com-Root-Certification-Authority-ECC.pem
2026-01-15 23:14:37 +01:00
Christian Hesse
156b0e4aaf
fw-addr-lists: www.dshield.org requires 'GTS Root R4'
2026-01-15 23:14:37 +01:00
Christian Hesse
302fc0bb82
fw-addr-lists: lists.blocklist.de requires 'GTS Root R4'
2026-01-15 23:14:33 +01:00
Christian Hesse
df8d0370c5
doc/mod/ssh-keys-import: reverse old and new
2026-01-14 15:30:21 +01:00
Christian Hesse
cc56680206
log-forward: try to mitigate a race condition
...
The old code looped over all new messages, then updated the variable
to the newest message - at that time! Messages in between were lost.
2026-01-14 15:19:12 +01:00
