mirror of
https://github.com/eworm-de/routeros-scripts.git
synced 2026-02-14 12:19:35 +00:00
078af75546
Add ROOT certification authority for github.com (USERTrust ECC Certification Authority) Also, running 'make' when you don't have support for ipv6 stops at 'ipv6.showipv6.de' which only has AAAA record. To allow verify all IPv4 sites/certs before failing for IPv6, Makefile now has two domain lists; the original one (DOMAINS) and the IPv6-only (DOMAINSIPV6). With these changes, the error occurs after validating all IPv4 compatible sites/certs.
35 lines
1.1 KiB
Makefile
35 lines
1.1 KiB
Makefile
# Makefile to check certificates
|
|
|
|
DOMAINS = \
|
|
1.1.1.1/DigiCert-Global-Root-G2 \
|
|
8.8.8.8/GTS-Root-R1 \
|
|
9.9.9.9/DigiCert-Global-Root-G3 \
|
|
api.macvendors.com/GTS-Root-R4 \
|
|
api.mullvad.net/ISRG-Root-X1 \
|
|
api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
|
|
cloudflare-dns.com/DigiCert-Global-Root-G2 \
|
|
dns.google/GTS-Root-R1 \
|
|
dns.quad9.net/DigiCert-Global-Root-G3 \
|
|
feodotracker.abuse.ch/GlobalSign \
|
|
git.eworm.de/ISRG-Root-X2 \
|
|
github.com/USERTrust-ECC-Certification-Authority \
|
|
ipv4.showipv6.de/ISRG-Root-X1 \
|
|
ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
|
|
lists.blocklist.de/Certum-Trusted-Network-CA \
|
|
matrix.org/GTS-Root-R4 \
|
|
mkcert.org/ISRG-Root-X1 \
|
|
ntfy.sh/ISRG-Root-X1 \
|
|
sslbl.abuse.ch/GlobalSign \
|
|
upgrade.mikrotik.com/ISRG-Root-X1 \
|
|
www.dshield.org/ISRG-Root-X1 \
|
|
www.spamhaus.org/GTS-Root-R4
|
|
|
|
DOMAINSIPV6 = \
|
|
ipv6.showipv6.de/ISRG-Root-X1
|
|
|
|
.PHONY: $(DOMAINS) $(DOMAINSIPV6)
|
|
|
|
all: $(DOMAINS) $(DOMAINSIPV6)
|
|
|
|
$(DOMAINS) $(DOMAINSIPV6) :
|
|
curl --output /dev/null --silent --connect-timeout 5 --cacert $(notdir $@).pem https://$(dir $@)
|