diff options
| author |  Christian Hesse <mail@eworm.de> | 2020-12-17 22:01:01 +0100 |
|---|---|---|
| committer | Christian Hesse <mail@eworm.de> | 2020-12-17 22:14:25 +0100 |
| commit | c51a630a21b601695ec334b7fa22ffe791a94a25 (patch) | |
| tree | dcfd315111cc32fdffb8248ef51bdcbc1bd94de3 | |
| parent | 9f6b877aef96b95a839a9dbcb18b221352c0d37d (diff) | |
INITIAL-COMMANDS: also import Let's Encrypt certificate "R3"
| -rw-r--r-- | INITIAL-COMMANDS.md | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md index 6c167ef..bf26ff1 100644 --- a/INITIAL-COMMANDS.md +++ b/INITIAL-COMMANDS.md @@ -7,13 +7,16 @@ These command are inteneded for initial setup. If you are not aware of the procedure please follow [the long way in detail](README.md#the-long-way-in-detail). { - / tool fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/Let%27s%20Encrypt%20Authority%20X3.pem" dst-path="letsencrypt.pem"; + / tool fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/R3.pem" dst-path="letsencrypt-R3.pem"; + / tool fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/Let%27s%20Encrypt%20Authority%20X3.pem" dst-path="letsencrypt-X3.pem"; :delay 1s; - / certificate import file-name=letsencrypt.pem passphrase=""; - :if ([ :len [ / certificate find where fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" or fingerprint="731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568" or fingerprint="0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739" ] ] != 3) do={ + / certificate import file-name=letsencrypt-R3.pem passphrase=""; + / certificate import file-name=letsencrypt-X3.pem passphrase=""; + :if ([ :len [ / certificate find where fingerprint="67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd" or fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" or fingerprint="731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568" or fingerprint="0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739" ] ] != 4) do={ :error "Something is wrong with your certificates!"; } - / file remove "letsencrypt.pem"; + / file remove "letsencrypt-R3.pem"; + / file remove "letsencrypt-X3.pem"; :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={ / system script add name=$Script source=([ / tool fetch check-certificate=yes-without-crl ("https://git.eworm.de/cgit/routeros-scripts/plain/" . $Script) output=user as-value]->"data"); } @@ -21,6 +24,7 @@ procedure please follow [the long way in detail](README.md#the-long-way-in-detai / system script { run global-config; run global-config-overlay; run global-functions; } / system scheduler add name="global-scripts" start-time=startup on-event="/ system script { run global-config; run global-config-overlay; run global-functions; }"; :global CertificateNameByCN; + $CertificateNameByCN "R3"; $CertificateNameByCN "ISRG Root X1"; $CertificateNameByCN "Let's Encrypt Authority X3"; $CertificateNameByCN "DST Root CA X3"; |