aboutsummaryrefslogblamecommitdiffstats
path: root/certificate-renew-issued
blob: fe33b9312941ba68e6fb20aefad7aae664e1d577 (plain) (tree)
1
2
3
4
5
6
7
8
9
                                           
                                                         
                                   
                                                                                  
 
                             
                     
              





                                                                                              



                                                                                   


                                                                                                   
   
 
#!rsc
# RouterOS script: certificate-renew-issued
# Copyright (c) 2019-2020 Christian Hesse <mail@eworm.de>
#
# renew locally issued certificates
# https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md

:global CertIssuedExportPass;

:global LogPrintExit;
:global MkDir;

:foreach Cert in=[ / certificate find where issued expires-after<3w ] do={
  :local CertVal [ / certificate get $Cert ];
  / certificate issued-revoke $Cert;
  / certificate set name=($CertVal->"name" . "-revoked-" . [ / system clock get date ]) $Cert;
  / certificate add name=($CertVal->"name") common-name=($CertVal->"common-name") \
      key-usage=($CertVal->"key-usage") subject-alt-name=($CertVal->"subject-alt-name");
  / certificate sign ($CertVal->"name") ca=($CertVal->"ca");
  :if ([ :typeof ($CertIssuedExportPass->($CertVal->"common-name")) ] = "str") do={
    $MkDir "cert-issued";
    / certificate export-certificate ($CertVal->"name") type=pkcs12 \
        file-name=("cert-issued/" . $CertVal->"common-name") \
        export-passphrase=($CertIssuedExportPass->($CertVal->"common-name"));
    $LogPrintExit info ("Issued a new certificate for \"" . $CertVal->"common-name" . \
      "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false;
  } else={
    $LogPrintExit info ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false;
  }
}