From a832fd04ef085ef7e85000843a8e8fa59ce36dfb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 7 Mar 2023 10:57:42 +0100
Subject: rename scripts and add file extension ".rsc"

No functional change for the user... The migration is done
automatically.
---
 certificate-renew-issued.rsc | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 certificate-renew-issued.rsc

(limited to 'certificate-renew-issued.rsc')

diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
new file mode 100644
index 0000000..c297b15
--- /dev/null
+++ b/certificate-renew-issued.rsc
@@ -0,0 +1,38 @@
+#!rsc by RouterOS
+# RouterOS script: certificate-renew-issued
+# Copyright (c) 2019-2023 Christian Hesse <mail@eworm.de>
+# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
+#
+# renew locally issued certificates
+# https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md
+
+:local 0 "certificate-renew-issued";
+:global GlobalFunctionsReady;
+:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
+
+:global CertIssuedExportPass;
+
+:global LogPrintExit2;
+:global MkDir;
+
+:foreach Cert in=[ /certificate/find where issued expires-after<3w ] do={
+  :local CertVal [ /certificate/get $Cert ];
+  /certificate/issued-revoke $Cert;
+  /certificate/set name=($CertVal->"name" . "-revoked-" . [ /system/clock/get date ]) $Cert;
+  /certificate/add name=($CertVal->"name") common-name=($CertVal->"common-name") \
+      key-usage=($CertVal->"key-usage") subject-alt-name=($CertVal->"subject-alt-name");
+  /certificate/sign ($CertVal->"name") ca=($CertVal->"ca");
+  :if ([ :typeof ($CertIssuedExportPass->($CertVal->"common-name")) ] = "str") do={
+    :if ([ $MkDir "cert-issued" ] = true) do={
+      /certificate/export-certificate ($CertVal->"name") type=pkcs12 \
+          file-name=("cert-issued/" . $CertVal->"common-name") \
+          export-passphrase=($CertIssuedExportPass->($CertVal->"common-name"));
+      $LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . \
+        "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false;
+    } else={
+      $LogPrintExit2 warning $0 ("Failed creating directory, not exporting certificate.") false;
+    }
+  } else={
+    $LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false;
+  }
+}
-- 
cgit v1.2.3-54-g00ecf