INITIAL-COMMANDS: warn on missing checksums

INITIAL-COMMANDS: give hint on url in global configuration overlay
INITIAL-COMMANDS: give option to install from mirrors
2026-07-30 13:11:36 +00:00 · 2026-07-08 16:07:44 +02:00 · 2026-07-08 16:07:19 +02:00 · 2026-07-08 16:06:53 +02:00 · 2026-07-08 15:29:36 +02:00 · 2026-07-08 15:29:36 +02:00
3 changed files with 73 additions and 1 deletions
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@ -55,6 +55,39 @@ Then continue setup with
 [scheduled automatic updates](README.md#scheduled-automatic-updates) or
 [editing configuration](README.md#editing-configuration).

+## Install from mirror
+
+In case you have issues with my default source using a mirror may help.
+Just replace the first lines for updated variables.
+
+> 💡️ **Hint**: You may want to set the same *url* with `ScriptUpdatesBaseUrl`
+> in `global-config-overlay`.
+
+> ⚠️ **Warning**: The mirrors do not provide checksums. Each invocation of
+> `$ScriptInstallUpdate` takes longer and generates more traffic, as every
+> script needs to be downloaded for local check!
+
+### Install from git.eworm.de
+
+      :local BaseUrl "https://git.eworm.de/cgit/routeros-scripts/plain/";
+      :local CertCommonName "Root YE";
+      :local CertFileName "Root-YE.pem";
+      :local CertFingerprint "e14ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666";
+
+### Install from Github
+
+      :local BaseUrl "https://raw.githubusercontent.com/eworm-de/routeros-scripts/main/";
+      :local CertCommonName "Root YR";
+      :local CertFileName "Root-YR.pem";
+      :local CertFingerprint "e57b7e6f150c419102e8d5c055729ff967b9d1a829bf00cec89ca604ebf4a86f";
+
+### Install from Gitlab
+
+      :local BaseUrl "https://gitlab.com/eworm-de/routeros-scripts/raw/main/";
+      :local CertCommonName "Sectigo Public Server Authentication Root R46";
+      :local CertFileName "Sectigo-Public-Server-Authentication-Root-R46.pem";
+      :local CertFingerprint "7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06";
+
 ## Fix existing installation

 The [initial commands](#initial-commands) above allow to fix an existing
--- a/certs/Makefile
+++ b/certs/Makefile
@ -13,7 +13,7 @@ DOMAINS_DUAL = \
 	dns.google/GTS-Root-RX \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/Root-YE \
-	gitlab.com/USERTrust-RSA-Certification-Authority \
+	gitlab.com/Sectigo-Public-Server-Authentication-Root-R46 \
 	lists.blocklist.de/GTS-Root-R4 \
 	matrix.org/GTS-Root-R4 \
 	raw.githubusercontent.com/ISRG-Root-X1 \
--- a/certs/Sectigo-Public-Server-Authentication-Root-R46.pem
+++ b/certs/Sectigo-Public-Server-Authentication-Root-R46.pem
@ -0,0 +1,39 @@
+# Issuer: CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited
+# Subject: CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited
+# Label: "Sectigo Public Server Authentication Root R46"
+# Serial: 156256931880233212765902055439220583700
+# MD5 Fingerprint: 32:10:09:52:00:d5:7e:6c:43:df:15:c0:b1:16:93:e5
+# SHA1 Fingerprint: ad:98:f9:f3:e4:7d:75:3b:65:d4:82:b3:a4:52:17:bb:6e:f5:e4:38
+# SHA256 Fingerprint: 7b:b6:47:a6:2a:ee:ac:88:bf:25:7a:a5:22:d0:1f:fe:a3:95:e0:ab:45:c7:3f:93:f6:56:54:ec:38:f2:5a:06
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
Author	SHA1	Message	Date
Christian Hesse	4480282079	INITIAL-COMMANDS: warn on missing checksums	2026-07-08 16:07:44 +02:00
Christian Hesse	e906deda04	INITIAL-COMMANDS: give hint on url in global configuration overlay	2026-07-08 16:07:19 +02:00
Christian Hesse	5f32948f20	INITIAL-COMMANDS: give option to install from mirrors	2026-07-08 16:06:53 +02:00
Christian Hesse	0c69d49480	certs: add 'Sectigo Public Server Authentication Root R46'... ... to use with gitlab.com for mirror. curl -d '["Sectigo Public Server Authentication Root R46"]' https://mkcert.org/generate/ \| grep -v '^$' > certs/Sectigo-Public-Server-Authentication-Root-R46.pem	2026-07-08 15:29:36 +02:00
Christian Hesse	b960a9d2fb	global-functions: $ScriptInstallUpdate: log and print error It is no longer expected to fail... So let's complain.	2026-07-08 15:29:36 +02:00
Christian Hesse	aa14c26488	global-functions: $ScriptInstallUpdate: skip checksums if not rsc.eworm.de The file is not in git repository, but generated when deploying to my server only.	2026-07-08 15:29:36 +02:00