aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2020-12-21 00:02:49 +0100
committerGravatar Christian Hesse <mail@eworm.de>2020-12-21 00:02:49 +0100
commit85ec8344ea12265910ea63ce66db702869d95a16 (patch)
treef5fbf2d37d722a2d2afa8b4df3c5ef5275af3ff2
parentde356a657061b2e1803b89c543c34fb16982dd23 (diff)
downloadrouteros-scripts-lets-encrypt-ISRG-X1.tar.gz
routeros-scripts-lets-encrypt-ISRG-X1.tar.zst
update Let's Encrypt trust chainlets-encrypt-ISRG-X1
Drop "DST Root CA X3", use "ISRG Root X1" instead. The migration code makes sure the intermediate certificate "R3" is signed by new root CA.
-rw-r--r--global-config2
-rw-r--r--global-config-overlay2
-rw-r--r--global-config.changes2
-rw-r--r--global-functions2
4 files changed, 5 insertions, 3 deletions
diff --git a/global-config b/global-config
index 379701a..af4611a 100644
--- a/global-config
+++ b/global-config
@@ -8,7 +8,7 @@
# Make sure all configuration properties are up to date and this
# value is in sync with value in script 'global-functions'!
-:global GlobalConfigVersion 41;
+:global GlobalConfigVersion 42;
# This is used for DNS and backup file.
:global Domain "example.com";
diff --git a/global-config-overlay b/global-config-overlay
index a7cd500..d5cfc1f 100644
--- a/global-config-overlay
+++ b/global-config-overlay
@@ -9,7 +9,7 @@
# Make sure all configuration properties are up to date and this
# value is in sync with value in script 'global-functions'!
# Comment or remove to disable change notifications.
-:global GlobalConfigVersion 41;
+:global GlobalConfigVersion 42;
# Copy configuration from global-config here and modify it.
diff --git a/global-config.changes b/global-config.changes
index 2d53160..1f54dc0 100644
--- a/global-config.changes
+++ b/global-config.changes
@@ -45,9 +45,11 @@
39="Added support for interface specific address list entries in 'ipv6-update'.";
40="Made the certificate renewal time configurable.";
41="Implemented migration mechanism for script updates.";
+ 42="Updated Let's Encrypt trust chain.";
};
# Migration steps to be applied on script updates
:global GlobalConfigMigration {
41=":global SendNotification; \$SendNotification (\"Migration mechanism\") (\"Congratulations!\nSuccessfully tested the new migration mechanism.\");";
+ 42=":global CertificateDownload; :local Cert [ / certificate find where fingerprint=\"0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739\" ]; :if ([ :len \$Cert ] > 0) do={ :if ([ :len [ / certificate find where fingerprint=\"730c1bdcd85f57ce5dc0bba733e5f1ba5a925b2a771d640a26f7a454224dad3b\" ] ] > 0) do={ \$CertificateDownload \"R3\"; }; / certificate remove \$Cert; }";
};
diff --git a/global-functions b/global-functions
index 192e326..d92e0ce 100644
--- a/global-functions
+++ b/global-functions
@@ -8,7 +8,7 @@
# https://git.eworm.de/cgit/routeros-scripts/about/
# expected configuration version
-:global ExpectedConfigVersion 41;
+:global ExpectedConfigVersion 42;
# global variables not to be changed by user
:global GlobalFunctionsReady false;