diff options
Diffstat (limited to 'certificate-renew-issued')
| -rw-r--r-- | certificate-renew-issued | 38 | 
1 files changed, 0 insertions, 38 deletions
diff --git a/certificate-renew-issued b/certificate-renew-issued deleted file mode 100644 index c8ce4ae..0000000 --- a/certificate-renew-issued +++ /dev/null @@ -1,38 +0,0 @@ -#!rsc by RouterOS -# RouterOS script: certificate-renew-issued -# Copyright (c) 2019-2021 Christian Hesse <mail@eworm.de> -# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md -# -# renew locally issued certificates -# https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md - -:local 0 "certificate-renew-issued"; -:global GlobalFunctionsReady; -:while ($GlobalFunctionsReady != true) do={ :delay 500ms; } - -:global CertIssuedExportPass; - -:global LogPrintExit2; -:global MkDir; - -:foreach Cert in=[ / certificate find where issued expires-after<3w ] do={ -  :local CertVal [ / certificate get $Cert ]; -  / certificate issued-revoke $Cert; -  / certificate set name=($CertVal->"name" . "-revoked-" . [ / system clock get date ]) $Cert; -  / certificate add name=($CertVal->"name") common-name=($CertVal->"common-name") \ -      key-usage=($CertVal->"key-usage") subject-alt-name=($CertVal->"subject-alt-name"); -  / certificate sign ($CertVal->"name") ca=($CertVal->"ca"); -  :if ([ :typeof ($CertIssuedExportPass->($CertVal->"common-name")) ] = "str") do={ -    :if ([ $MkDir "cert-issued" ] = true) do={ -      / certificate export-certificate ($CertVal->"name") type=pkcs12 \ -          file-name=("cert-issued/" . $CertVal->"common-name") \ -          export-passphrase=($CertIssuedExportPass->($CertVal->"common-name")); -      $LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . \ -        "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false; -    } else={ -      $LogPrintExit2 warning $0 ("Failed creating directory, not exporting certificate.") false; -    } -  } else={ -    $LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false; -  } -}  |