groove/routeros-scripts-main
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts.git synced 2026-01-20 16:09:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3393 commits 4 branches 247 tags 11 MiB
Commit graph

3393 commits

This branch
This branch
All branches
Author SHA1 Message Date
Christian Hesse
f3e2693b5c check-perpetual-license: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
9e1e6c8a93 check-lte-firmware-upgrade: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
9f7ec88f3d check-health: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
d8980ffc11 check-certificates: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
d9f5105b02 certificate-renew-issued: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
9851ffb927 capsman-rolling-upgrade: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
85965a6dee capsman-download-packages: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
98bd011984 backup-upload: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
6f1f60a82b backup-partition: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
3ad7b5f2bb backup-email: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
d4547ecbfa backup-cloud: early exit with :exit 2026-01-19 23:30:02 +01:00
Christian Hesse
33fb1ae7eb Merge branch 'compare-ids' into next 2026-01-19 23:27:31 +01:00
Christian Hesse
ee668a3594 global-functions: drop $HexToNum 2026-01-19 23:27:31 +01:00
Christian Hesse
0d9480ecea log-forward: fix indention 2026-01-19 23:27:31 +01:00
Christian Hesse
d154815dbf log-forward: use comparison for ids 
This was introduced with RouterOS 7.22beta1.

Initializing $LogForwardLast with boolean value looks odd, but this is
reuqired to match the very first message.
 2026-01-19 23:27:27 +01:00
Christian Hesse
b3949a8881 mod/notification-email: use errors from command... 
... instead of reading status from properties. This was introduced in
RouterOS 7.21beta2 (and we bump to 7.21 instead).
 2026-01-19 23:26:52 +01:00
Christian Hesse
867b4b0067 mod/ssh-keys-import: drop old property 
The property name changed in RouterOS 7.21beta2, so bump required
version to 7.21.
 2026-01-19 23:26:08 +01:00
Christian Hesse
abe7bf4791 Merge branch 'certificate-builtin' into next 2026-01-19 23:25:26 +01:00
Christian Hesse
c37716b71a bump required RouterOS version for all scripts 2026-01-19 23:25:12 +01:00
Christian Hesse
1c2b441b2c global-functions: $CertificateAvailable: drop the compatibility workaround... 
... and make it depend in RouterOS 7.19 and its builtin certificates.
 2026-01-19 23:17:32 +01:00
Christian Hesse
c352fddf0e INITIAL-COMMANDS: drop the compatibility workaround... 
... and make it depend in RouterOS 7.19 and its builtin certificates.
 2026-01-19 23:17:32 +01:00
Christian Hesse
08de69cd9f check-certificates: drop the compatibility workaround... 
... and make it depend in RouterOS 7.19 and its builtin certificates.
 2026-01-19 23:17:32 +01:00
Christian Hesse
72660f21a5 check-certificates: print warning on $CertRenewUrl just once 2026-01-19 16:37:20 +01:00
Christian Hesse
f1333087d2 mode-button: drop unused variable $ExitOK 2026-01-19 14:55:19 +01:00
Christian Hesse
e6542ba8cc accesslist-duplicates: drop unused variable $ExitOK 2026-01-19 14:54:32 +01:00
Christian Hesse
883a442ff5 Merge branch 'lets-encrypt-gen-y' into next 2026-01-17 16:59:01 +01:00
Christian Hesse
7716bb9d6c fw-addr-lists: rsc.eworm.de requires 'Root YE' 2026-01-17 16:58:16 +01:00
Christian Hesse
ced6bf2c11 INITIAL-COMMANDS: update for new Let's Encrypt CA 'Root YE' 2026-01-17 16:58:16 +01:00
Christian Hesse
6e8e841906 README: update for new Let's Encrypt CA 'Root YE' 2026-01-17 16:58:16 +01:00
Christian Hesse
9919b9fe76 global-functions: $ScriptInstallUpdate: get new Let's Encrypt CA 'Root YE' 2026-01-17 16:58:16 +01:00
Christian Hesse
68a4ac942e certs: update *.eworm.de for new Let's Encrypt 'Root YE' 2026-01-17 16:58:16 +01:00
Christian Hesse
244eceafee certs: add Let's Encrypt 'Root YR' for future use 
https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
 2026-01-17 16:58:16 +01:00
Christian Hesse
aebe7bd054 certs: add Let's Encrypt 'Root YE' for future use 
https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
 2026-01-17 16:58:16 +01:00
Christian Hesse
6468c24d61 update list of contributors 2026-01-17 16:57:50 +01:00
Christian Hesse
fd4bf59bae Merge branch 'certificates' into next 2026-01-17 16:57:34 +01:00
Christian Hesse
b52936e946 doc/netwatch-dns: mention ip address... 
... which can be used for serveral services that have it in SAN.
 2026-01-17 16:52:20 +01:00
Christian Hesse
92759fcca5 doc/netwatch-dns: give hint on multiple certificates 2026-01-16 14:48:18 +01:00
Christian Hesse
ad310e6573 doc/netwatch-dns: always use the same order for examples 2026-01-16 14:48:18 +01:00
Christian Hesse
c0c1c5521e doc/netwatch-dns: include examples for dns.quad9.net & dns.google 2026-01-16 14:48:02 +01:00
Christian Hesse
0fffb5198e netwatch-dns: support multiple certificates 
Some services use certificates issued by differnt CA certificates,
depending on geolocation. One example is dns.google, which may require
either of 'GTS Root R1' or 'GTS Root R4'.

    /tool/netwatch/add comment="doh, dns, name=google-dns-ipv4, doh-cert=GTS Root R1:GTS Root R4" host=8.8.8.8 type=simple;
 2026-01-16 13:52:18 +01:00
Christian Hesse
330a616406 check-certificates: abort renew if "new" certificate is older... 
... and drop the condition on $CertRenewTime.
 2026-01-16 13:41:10 +01:00
Christian Hesse
0fee5cea3c check-certificates: move the warning below check for key 2026-01-16 13:41:10 +01:00
Christian Hesse
d673f0956c global-functions: $CertificateAvailable: get missing certificate... 
... not the issued and available one.
 2026-01-16 00:32:49 +01:00
Christian Hesse
ad455c8f1d doc/netwatch-dns: cloudflare uses a new CA for certificates 2026-01-15 23:14:37 +01:00
Christian Hesse
b72a79824e certs: add 'SSL.com Root Certification Authority ECC'... 
... to use with Cloudflare DNS.

curl -d '["SSL.com Root Certification Authority ECC"]' https://mkcert.org/generate/ | grep -v '^$' > certs/SSL-com-Root-Certification-Authority-ECC.pem
 2026-01-15 23:14:37 +01:00
Christian Hesse
156b0e4aaf fw-addr-lists: www.dshield.org requires 'GTS Root R4' 2026-01-15 23:14:37 +01:00
Christian Hesse
302fc0bb82 fw-addr-lists: lists.blocklist.de requires 'GTS Root R4' 2026-01-15 23:14:33 +01:00
Christian Hesse
df8d0370c5 doc/mod/ssh-keys-import: reverse old and new 2026-01-14 15:30:21 +01:00
Christian Hesse
cc56680206 log-forward: try to mitigate a race condition 
The old code looped over all new messages, then updated the variable
to the newest message - at that time! Messages in between were lost.
 2026-01-14 15:19:12 +01:00
Christian Hesse
6fd28bf8f7 netwatch-dns: check the certificate is available for fetch 
That trust is not needed for DNS functionality (that was checked before),
but for our hacky check with fetch.
 2026-01-14 15:05:07 +01:00