mirror of
https://github.com/eworm-de/routeros-scripts.git
synced 2026-07-09 02:41:33 +00:00
Compare commits
No commits in common. "bf684a7197f9ad07e23415de5779a366af7dd71b" and "6a49c483b679d7dc68b7b12617be24508c3fa5b4" have entirely different histories.
bf684a7197
...
6a49c483b6
2 changed files with 1 additions and 16 deletions
12
README.md
12
README.md
|
|
@ -72,15 +72,7 @@ including demonstation recorded live at [MUM Europe
|
||||||
### The long way in detail
|
### The long way in detail
|
||||||
|
|
||||||
The update script does server certificate verification, so first step is to
|
The update script does server certificate verification, so first step is to
|
||||||
download the certificates.
|
download the certificates. If you intend to download the scripts from a
|
||||||
|
|
||||||
> 💡️ **Hint**: RouterOS 7.19 comes with a builtin certificate store. You
|
|
||||||
> can skip the steps regarding certificate download and import and jump
|
|
||||||
> to [installation of scripts](#installation-of-scripts) if you set the
|
|
||||||
> trust for these builtin trust anchors:
|
|
||||||
> `/certificate/settings/set builtin-trust-anchors=trusted;`
|
|
||||||
|
|
||||||
If you intend to download the scripts from a
|
|
||||||
different location (for example from github.com) install the corresponding
|
different location (for example from github.com) install the corresponding
|
||||||
certificate chain.
|
certificate chain.
|
||||||
|
|
||||||
|
|
@ -114,8 +106,6 @@ is shown.
|
||||||
|
|
||||||
Always make sure there are no certificates installed you do not know or want!
|
Always make sure there are no certificates installed you do not know or want!
|
||||||
|
|
||||||
#### Installation of scripts
|
|
||||||
|
|
||||||
All following commands will verify the server certificate. For validity the
|
All following commands will verify the server certificate. For validity the
|
||||||
certificate's lifetime is checked with local time, so make sure the device's
|
certificate's lifetime is checked with local time, so make sure the device's
|
||||||
date and time is set correctly!
|
date and time is set correctly!
|
||||||
|
|
|
||||||
|
|
@ -119,11 +119,6 @@
|
||||||
:return false;
|
:return false;
|
||||||
}
|
}
|
||||||
|
|
||||||
:if (([ /certificate/settings/get ]->"builtin-trust-anchors") = "trusted" && \
|
|
||||||
[[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CommonName . "\" ] ]") ]] > 0) do={
|
|
||||||
:return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
:if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
|
:if ([ :len [ /certificate/find where common-name=$CommonName ] ] = 0) do={
|
||||||
$LogPrint info $0 ("Certificate with CommonName '" . $CommonName . "' not available.");
|
$LogPrint info $0 ("Certificate with CommonName '" . $CommonName . "' not available.");
|
||||||
:if ([ $CertificateDownload $CommonName ] = false) do={
|
:if ([ $CertificateDownload $CommonName ] = false) do={
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue