Commit graph

3505 commits

Author SHA1 Message Date
Christian Hesse
cb0ed55604 check-lte-firmware-upgrade: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
746a53109f check-health: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
e550c77935 check-certificates: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
02e0f0ab69 certificate-renew-issued: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
00757f808f capsman-rolling-upgrade: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
2d269f96d2 capsman-download-packages: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
4e3698edc1 backup-upload: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
65dd7e6a9b backup-partition: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
9a2cf4cad3 backup-email: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
a68ee9257f backup-cloud: early exit with :exit 2026-05-14 23:01:23 +02:00
Christian Hesse
ba49309cd7 Merge branch 'compare-ids' into next 2026-05-14 23:01:23 +02:00
Christian Hesse
727a92738c bump required RouterOS version for all scripts 2026-05-14 23:01:23 +02:00
Christian Hesse
1763acc725 global-functions: deprecate $HexToNum 2026-05-14 23:01:23 +02:00
Christian Hesse
baf819b751 Merge branch 'drop-builtin-trust-anchors' into next 2026-05-14 23:01:23 +02:00
Christian Hesse
cb27a3c915 log-forward: fix indention 2026-05-14 23:01:23 +02:00
Christian Hesse
13c2616453 mod/notification-email: get property by name
This works now that we require RouterOS 7.21 anyway.
2026-05-14 23:01:23 +02:00
Christian Hesse
d960af89ce INITIAL-COMMANDS: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
e8279ab437 log-forward: use comparison for ids
This was introduced with RouterOS 7.22beta1.

Initializing $LogForwardLast with boolean value looks odd, but this is
required to match the very first message.
2026-05-14 23:01:23 +02:00
Christian Hesse
ac3346b5f6 mod/notification-email: use errors from command...
... instead of reading status from properties. This was introduced in
RouterOS 7.21beta2 (and we bump to 7.21 instead).
2026-05-14 23:01:23 +02:00
Christian Hesse
333b214fd8 global-functions: $CertificateDownload: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
ed3b4cdb53 Merge branch 'toarray-delimiter' into next 2026-05-14 23:01:23 +02:00
Christian Hesse
3b1ce63c06 global-functions: $CertificateAvailable: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
bbc2d5df2e check-health: use :toarray's new delimiter= 2026-05-14 23:01:23 +02:00
Christian Hesse
bd6b5294b8 README: drop the old builtin-trust-anchors 2026-05-14 23:01:23 +02:00
Christian Hesse
34a4d70f24 fw-addr-lists: get both Let's Encrypt certificates for rsc.eworm.de 2026-05-14 23:01:23 +02:00
Christian Hesse
bf46f980aa fw-addr-lists: support giving several certificates...
... by delimiting with a colon.
2026-05-14 23:01:23 +02:00
Christian Hesse
c42709cd9b netwatch-dns: use :toarray's new delimiter= to split cert names
The new delimiter= parameter for :toarray with introduced in
RouterOS 7.21.
2026-05-14 23:01:23 +02:00
Christian Hesse
d586205a70 Info on Let's Encrypt change
> Let's Encrypt's Gen Y (YE and YR bulleted below) Cross-Certified
> Subordinate CAs were issued in violation of CCADB policy which requires
> that the serverAuth EKU extension MUST be present in cross-signed
> intermediate certificates issued since June 15th 2025. Root YE and
> YR were issued September 3rd 2025 and are subject to the requirements.

https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105
2026-05-14 22:59:07 +02:00
Christian Hesse
71c190b478 Merge branch 'lets-encrypt-old-chain' into next 2026-05-13 16:19:11 +02:00
Christian Hesse
a3de8aa081 global-functions: $CleanName: add missing colon 2026-05-13 16:19:11 +02:00
Christian Hesse
2a6567135e INITIAL-COMMANDS: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
7ad60ac704 README: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
59e0c4460e certs: Let's Encrypt switched back to old chain 2026-05-13 16:19:11 +02:00
Christian Hesse
6f2eb69ee0 global-functions: $ScriptInstallUpdate: Check for both LE certificates
Hmm... 🤨 Let's Encrypt is doing crazy things. My server was switched to
'Root YE' alredy, now it is back to 'ISRG Root X2'... 😳

So let's check for both for now.
2026-05-13 16:19:11 +02:00
Christian Hesse
73f15a2df0 global-functions: $RmFile: ignore "no such item"...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
57385b5934 global-functions: $RmDir: ignore "no such item"...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
74d3fc2933 global-functions: $RmFile: remove with find...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
875df5da76 global-functions: $RmDir: remove with find...
... as this is still racy.
2026-05-07 15:58:07 +02:00
Christian Hesse
3aaba1f408 netwatch-dns: check with eworm.de and eworm.net
This should prevent against DENIC outages...

https://blog.denic.de/en/denic-reports-resolved-dnssec-disruption-affecting-de-domains/
2026-05-06 16:15:17 +02:00
Christian Hesse
0ef11bf11d global-functions: $IsDNSResolving: check with :retry 2026-05-06 16:15:17 +02:00
Christian Hesse
811df5abf2 global-functions: $IsDNSResolving: check with eworm.de and eworm.net
This should prevent against DENIC outages...

https://blog.denic.de/en/denic-reports-resolved-dnssec-disruption-affecting-de-domains/
2026-05-06 10:01:39 +02:00
Christian Hesse
cd4052ba6b Merge branch 'backup-filename-date' into next 2026-04-28 16:37:09 +02:00
Christian Hesse
2f5aa2f337 backup-{email,upload}: add setting in configuration 2026-04-28 16:36:45 +02:00
Christian Hesse
2f621a5981 backup-upload: drop the GMT offset from filename...
... as it is of little help only. Also it is ambiguous due
to signdness being dropped when cleaning the name.
2026-04-28 16:36:31 +02:00
Christian Hesse
fd956519e2 backup-email: drop the GMT offset from filename...
... as it is of little help only. Also it is ambiguous due
to signdness being dropped when cleaning the name.
2026-04-28 16:36:31 +02:00
Christian Hesse
0382a368ec backup-upload: support date & time in filename 2026-04-28 16:36:31 +02:00
Christian Hesse
d54a0d541d backup-email: support date & time in filename 2026-04-28 16:36:31 +02:00
Christian Hesse
174e16502a global-config: update comment on backup options 2026-04-28 16:36:15 +02:00
Christian Hesse
11dc1e2aa1 ipv6-update: log dynamic entry with info, not warning 2026-04-24 14:28:25 +02:00
Christian Hesse
1f460b5bae mod/notification-email: add setting for certificate verification 2026-04-23 09:17:42 +02:00