Age | Commit message (Expand) | Author | Files | Lines |
2023-10-26 | global: switch eworm.de to new certificate chain (E1 / ISRG Root X2)•••old chain: R3 / ISRG Root X1
new chain: E1 / ISRG Root X2
No user interaction or migration is required for existing installations
as we install 'E1' and 'ISRG Root X2' for some time already.
| Christian Hesse | 1 | -119/+0 |
2023-06-13 | certs: add Cloudflare certificates...•••... for later use.
| Christian Hesse | 1 | -0/+163 |
2023-06-13 | certs: add GlobalSign certificates...•••... for later use.
| Christian Hesse | 1 | -0/+177 |
2022-09-13 | global-functions: $GetMacVendor: switched to Let's Encrypt (R3)•••So let's check for the correct one, and drop the other.
| Christian Hesse | 1 | -166/+0 |
2021-09-21 | certs: drop old chain GTS CA 1O1 / GlobalSign | Christian Hesse | 1 | -186/+0 |
2021-09-20 | certs: add new chain GTS CA 1C3 / GTS Root R1•••This is used by Google DNS (8.8.8.8).
$CertificateAvailable "GTS CA 1C3"
/ip dns set use-doh-server=https://8.8.8.8/dns-query verify-doh-cert=yes
| Christian Hesse | 1 | -0/+242 |
2021-09-20 | certs: drop old intermediate cert DigiCert ECC Secure Server CA | Christian Hesse | 1 | -166/+0 |
2021-09-20 | certs: add new intermediate cert DigiCert TLS Hybrid ECC SHA384 2020 CA1•••This is used by Cloudflare DNS (1.1.1.1) and Quard9 (9.9.9.9).
$CertificateAvailable "DigiCert TLS Hybrid ECC SHA384 2020 CA1"
/ip dns set use-doh-server=https://1.1.1.1/dns-query verify-doh-cert=yes
$CertificateAvailable "DigiCert TLS Hybrid ECC SHA384 2020 CA1"
/ip dns set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes
| Christian Hesse | 1 | -0/+174 |
2021-05-18 | drop certificate DST Root CA X3•••Let's Encrypt planned the transition to ISRG's root certificate ("ISRG Root
X1") on July 8, 2019, but postponed several times.
Finally they found another solution: A certificate 'ISRG Root X1', but
cross-signed with 'DST Root CA X3' and with a livetime that exceeds that
of the root CA. This is said to work for most operating system where root
certificate authorities are just 'trust anchors'.
I doubt this is true for RouterOS, where certificates are just imported
into the certificate store. So let's migrate to 'ISRG Root X1' now.
| Christian Hesse | 1 | -77/+0 |
2021-02-24 | global-functions: $GetMacVendor: requires certificate "Cloudflare Inc ECC CA-... | Christian Hesse | 1 | -0/+166 |
2020-12-30 | certs: add plain text info about certificates•••Also order certificates, so we have:
* intermediate
* root
* alternative root, if any
Let's add 'ISRG Root X1' for 'E1' as there will be a valid cross-signed
chain 'E1' -> 'ISRG Root X2' -> 'ISRG Root X1'.
| Christian Hesse | 6 | -68/+1028 |
2020-12-18 | certs: remove Let's Encrypt Authority X3 | Christian Hesse | 1 | -83/+0 |
2020-12-17 | certs: add new Let's Encrypt certificates•••https://letsencrypt.org/certificates/
| Christian Hesse | 2 | -0/+112 |
2020-06-10 | add certificate 'GTS CA 1O1'•••This is used by DNS over HTTPS services:
https://dns.google/dns-query
| Christian Hesse | 1 | -0/+47 |
2020-03-20 | add certificate 'DigiCert ECC Secure Server CA'•••This is used by DNS over HTTPS services:
https://cloudflare-dns.com/dns-query
https://dns9.quad9.net/dns-query (secured)
https://dns10.quad9.net/dns-query (unsecured)
https://github.com/curl/curl/wiki/DNS-over-HTTPS
| Christian Hesse | 1 | -0/+44 |
2019-04-30 | global-functions: $CertificateAvailable: fetch by CommonName•••Now that we have a proper $UrlEncode function... Fetch certificates
by CommonName.
Also remove the PEM after import.
| Christian Hesse | 3 | -0/+0 |
2019-01-02 | update-tunnelbroker: verify certificate | Christian Hesse | 1 | -0/+52 |
2018-12-20 | global-functions: make $CertificateAvailable work on CommonName•••This should prevent endless certificate switching for Let's Encrypt
cross-signed intermediate certificates.
| Christian Hesse | 4 | -136/+134 |
2018-12-20 | README: add Root CA certificate DST Root CA X3•••This is used by Let's Encrypt to cross-sign.
| Christian Hesse | 1 | -0/+20 |
2018-10-16 | README: download certificates from repository | Christian Hesse | 2 | -0/+64 |
2018-10-16 | global-functions: import certificates if required•••Signed-off-by: Christian Hesse <mail@eworm.de>
| Christian Hesse | 2 | -0/+52 |