Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
9 days | global-functions: $CertificateDownload: try fallback to mkcert.orgchange-131 | 1 | -11/+30 | ||
There's a nice API that allows to download certificate by exact common name. Let's use that, as a fallback at least. https://mkcert.org/ | |||||
9 days | notify on changes regarding certificateschange-130 | 1 | -1/+1 | ||
9 days | certs: GTS CA 1C3 / GTS CA 1P5 -> GTS Root R1 | 1 | -1/+1 | ||
9 days | certs: R3 / R10 -> ISRG Root X1 | 1 | -1/+1 | ||
9 days | certs: E1 / E5 -> ISRG Root X2 | 1 | -1/+1 | ||
In the beginning of Let's Encrypt their root certificate ISRG Root X1 was not widely trusted, at least some older and/or mobile platforms were missing that certificate in their root certificate store. At that time Let's Encrypt was using an alternative chain of trust, where a certificate was cross-signed with DST Root CA X3. To make sure a valid chain of trust is available under all circumstances a set of all certificates had to be supplied: both root vertificates ISRG Root X1 & DST Root CA X3, and an intermediate certificate. This was still true after DST Root CA X3 expired, as it could still be used as a root anchor and was shipped by Let's Encrypt when requested. 🤪 This time is finally over, and we have a clean chain for trust ending in ISRG Root X1 (or ISRG Root X2). Well, actually it is the other way round... Let's Encrypt signs with different tantamount intermediate certificates. There is not only E5, but also E6 - and we can not know beforehand which one is used on renew. So let's jetzt drop the intermediate certificates now, and rely on root certificates only. We are perfectly fine with this these days. Follow-up commits will do the same for *all* certificates. The certificate is downloaded with: curl -d '["ISRG Root X2"]' https://mkcert.org/generate/ | grep -v '^$' > certs/ISRG-Root-X2.pem | |||||
11 days | Let's Encrypt changed their intermediate certificates | 1 | -1/+1 | ||
https://letsencrypt.org/2024/03/19/new-intermediate-certificates https://letsencrypt.org/certificates/ But let's keep the old ones around for now, as some sites are still using the old intermediate. | |||||
2024-06-01 | global-functions: $CleanName: no exception for dash... | 1 | -1/+1 | ||
... as we still want to deduplicate it when it is inside the input string. This also unbreak certificate import for "Go Daddy Secure Certificate Authority - G2" (and more)... | |||||
2024-05-23 | backup-partition: news on support for copy-overchange-129 | 1 | -1/+1 | ||
2024-05-15 | global-functions: $IsTimeSync: initialize with uptime... | 1 | -2/+2 | ||
... to make sure the warning is not issued too early. | |||||
2024-05-14 | fw-addr-lists: add 'strongips' list from blocklist.dechange-128 | 1 | -1/+1 | ||
2024-05-08 | global-functions: $IsTimeSync: add (one time) warning on failed ntp sync | 1 | -0/+1 | ||
2024-05-08 | global-functions: $IsTimeSync: log just once | 1 | -3/+3 | ||
2024-04-29 | global-functions: $WaitForFile: drop extra conversion | 1 | -1/+1 | ||
2024-04-29 | global-functions: $WaitForFile: respect minimum delay | 1 | -1/+2 | ||
2024-04-29 | global-functions: $WaitForFile: use fewer steps | 1 | -2/+2 | ||
2024-04-29 | global-functions: $CleanName: do not start with a dash | 1 | -4/+12 | ||
2024-04-29 | global-functions: $FetchHuge: remove temporary directory | 1 | -4/+5 | ||
2024-04-19 | global-functions: $CertificateDownload: remove with find...routeros-7.15rc1-1 | 1 | -1/+1 | ||
... to make sure this does not break when the file does no longer exist. Starting with RouterOS 7.15rc1 the file is automatically removed on import. | |||||
2024-04-19 | global-functions: introduce $ProtocolStrip | 1 | -0/+12 | ||
2024-04-15 | global-functions: $CertificateDownload: use single quotes | 1 | -2/+2 | ||
2024-04-15 | global-functions: $CertificateAvailable: use single quotes | 1 | -3/+3 | ||
2024-04-15 | mod/notification-ntfy: support basic authchange-127 | 1 | -1/+1 | ||
Closes #59 | |||||
2024-04-11 | global-functions: $ScriptFromTerminal: check multiple invocations... | 1 | -1/+6 | ||
... and return false. We can not tell which job is us... So better safe than sorry. | |||||
2024-04-11 | global-functions: $ScriptLock: break long lines | 1 | -2/+5 | ||
2024-04-11 | global-functions: $ScriptLock: degrade message to debug | 1 | -2/+2 | ||
2024-04-10 | global-functions: $SendNotification: set origin | 1 | -1/+1 | ||
2024-04-07 | global-functions: $HumanReadableNum: indicate binary base... | 1 | -2/+6 | ||
... and update scripts to match the change. | |||||
2024-04-07 | global-functions: drop $LogPrintExit2 | 1 | -22/+0 | ||
2024-04-06 | global-functions: $FetchHuge: remove file on failed download | 1 | -0/+3 | ||
2024-04-06 | global-functions: $FetchHuge: make sure to work with clean file names | 1 | -3/+4 | ||
2024-04-06 | global-functions: $FetchHuge: control check-certificate with parameter | 1 | -3/+7 | ||
2024-04-06 | global-functions: $FetchHuge: use custom user agent string | 1 | -1/+3 | ||
2024-04-06 | global-functions: introduce $FetchHugerouteros-7.13-4 | 1 | -1/+38 | ||
2024-04-02 | global-functions: drop $ParseJson | 1 | -61/+0 | ||
2024-04-01 | telegram-chat: read file content...routeros-7.13-2change-126 | 1 | -1/+1 | ||
... instead of getting it. This lifts the size limit, though we are still limited by Telegram message size. This requires RouterOS 7.13. | |||||
2024-03-31 | news on charge and fees | 1 | -1/+1 | ||
2024-03-29 | global-functions: rename $FetchUserAgent -> $FetchUserAgentStr | 1 | -7/+7 | ||
... to make sure the function does not clash with the variable we had before, as this causes issue with news and changes notification. | |||||
2024-03-27 | global-functions: $HumanReadableNum: set declared function only | 1 | -1/+1 | ||
2024-03-27 | global-functions: $AlignRight: set declared function only | 1 | -1/+1 | ||
2024-03-27 | global-functions: $FetchUserAgent: set declared function only | 1 | -1/+1 | ||
2024-03-27 | global-functions: $LogPrintOnce: detect and warn on possible crash | 1 | -0/+5 | ||
2024-03-26 | global-functions: $LogPrintOnce: indicate action via return | 1 | -1/+2 | ||
2024-03-21 | telegram-chat: improve readability with symbols | 1 | -0/+1 | ||
2024-03-16 | global-functions: $CertificateDownload: download via clean name... | 1 | -9/+8 | ||
... and rename certificates in repository. | |||||
2024-03-16 | global-functions: generate user agent string in function... | 1 | -11/+16 | ||
... and add the caller and my shortened url. | |||||
2024-03-15 | global-functions: $LogPrintExit2: add deprecation warning | 1 | -0/+4 | ||
2024-03-15 | global-functions: $ScriptInstallUpdate: use shorter url | 1 | -1/+1 | ||
2024-03-14 | global-functions: $SymbolByUnicodeName: add these for later use | 1 | -0/+3 | ||
2024-03-13 | netwatch-notify: pass link to notificationchange-124 | 1 | -1/+1 | ||
This is pass verbatim below the notification text. | |||||
2024-03-12 | global-functions: switch to $LogPrint | 1 | -80/+82 | ||
2024-03-12 | global-functions: introduce $LogPrint, deprecate $LogPrintExit2change-123 | 1 | -4/+17 | ||
2024-03-12 | global-functions: $LogPrintOnce: drop support for exit | 1 | -5/+4 | ||
This is not widely adopted or used, so let's just drop it - no compatibility. | |||||
2024-03-12 | global-functions: add architecture in user-agent string | 1 | -1/+6 | ||
2024-03-12 | global-config: support loading snippetschange-122 | 1 | -1/+1 | ||
This adds support for loading snippets, which need a name starting with "global-config-overlay.d/". This allows to split off configuration if desired. | |||||
2024-03-12 | news on wifiwave2 EOLchange-121 | 1 | -1/+1 | ||
2024-03-12 | backup-cloud: catch error with :execute workaroundchange-120 | 1 | -1/+1 | ||
Catching a runtime error here fails... So let's try a workaround with :execute... | |||||
2024-03-12 | global-functions: $ScriptLock: fix wording... | 1 | -1/+1 | ||
... as this does (no longer) abort. | |||||
2024-03-12 | global-functions: $ScriptLock: do not exit from global function | 1 | -5/+4 | ||
2024-03-12 | global-functions: $DownloadPackage: do not exit from global function | 1 | -1/+2 | ||
2024-03-12 | global-functions: use variable name $ScriptName | 1 | -2/+2 | ||
2024-02-29 | fw-addr-lists: add support for IPv6change-119 | 1 | -1/+1 | ||
2024-01-31 | global-functions: $CertificateNameByCN: use $CleanName | 1 | -3/+2 | ||
2024-01-31 | global-functions: introduce $CleanName | 1 | -0/+19 | ||
2024-01-31 | global-functions: $MkDir: drop declaration of unused functions | 1 | -2/+0 | ||
2024-01-31 | global-functions: $IsDNSResolving: drop declaration of unused function | 1 | -2/+0 | ||
2024-01-30 | global-functions: $ScriptInstallUpdate: warn just once... | 1 | -1/+2 | ||
... for every script on required RouterOS version. | |||||
2024-01-30 | global-functions: use :jobname to get script name | 1 | -1/+1 | ||
2024-01-30 | send a warning on storage sizechange-118 | 1 | -1/+1 | ||
2024-01-30 | packages-update: support deferred reboot on auto-updatechange-117 | 1 | -1/+1 | ||
Closes #56 | |||||
2024-01-30 | global-functions: $RandomDelay: always scale to ms...routeros-7.12-1 | 1 | -2/+3 | ||
... to randomize in friction of unit. This requires :tonsec from RouterOS 7.12. | |||||
2024-01-29 | global-functions: $RandomDelay: allow zero time, return immediately | 1 | -0/+4 | ||
2024-01-29 | global-functions: $RandomDelay: name the parameters | 1 | -1/+4 | ||
2024-01-20 | global-functions: $SymbolByUnicodeName: log warning on missing name | 1 | -0/+7 | ||
2024-01-20 | global-functions: $SymbolByUnicodeName: name the parameter | 1 | -1/+3 | ||
2024-01-18 | global-functions: log successful loading | 1 | -0/+5 | ||
2024-01-18 | global-functions: $LogPrintOnce: support exit | 1 | -1/+2 | ||
2024-01-16 | global-functions: $HexToNum: use :tonum | 1 | -7/+5 | ||
2024-01-08 | global-functions: $CertificateDownload: move delay up | 1 | -1/+1 | ||
We still had cases where fetch misbehaves... But this was permanent. Perhaps we should not touch the certificate too early... | |||||
2024-01-01 | update copyright for 2024 | 1 | -1/+1 | ||
2023-12-22 | global-functions: $GetMacVendor: get new certificate | 1 | -1/+1 | ||
The service now uses: GTS CA 1P5 -> GTS Root R1 | |||||
2023-12-05 | mention the donation hint...change-116 | 1 | -1/+3 | ||
2023-12-05 | celebrating ✨⭐ 1.000 stars ⭐✨ on Github!change-115 | 1 | -1/+2 | ||
2023-12-04 | global-functions: $FormatLine: use $CharacterMultiply | 1 | -1/+3 | ||
2023-12-04 | global-functions: $AlignRight: use $CharacterMultiply | 1 | -1/+2 | ||
2023-12-04 | global-functions: introduce $CharacterMultiply | 1 | -0/+10 | ||
2023-12-04 | global-functions: $DeviceInfo: add SNMP location and contact | 1 | -1/+6 | ||
2023-11-30 | global-functions: introduce $MIN | 1 | -0/+7 | ||
2023-11-30 | global-functions: introduce $MAX | 1 | -0/+7 | ||
2023-11-30 | global-functions: $SymbolByUnicodeName: rename up-arrow -> arrow-up | 1 | -1/+1 | ||
... so arrows are grouped in case we add more. | |||||
2023-11-30 | global-functions: $SymbolForNotification: properly append space to alt text | 1 | -2/+3 | ||
2023-11-23 | global-functions: introduce $AlignRight | 1 | -0/+14 | ||
2023-11-15 | global-functions: introduce $HumanReadableNum | 1 | -0/+31 | ||
2023-11-15 | notify about parted scripts for wifi packagechange-114 | 1 | -1/+1 | ||
2023-11-09 | global-functions: drop $Read | 1 | -6/+0 | ||
... which is no longer required now that RouterOS 7.12beta1 provides /terminal/ask. | |||||
2023-11-09 | mod/notification-matrix: introduce $SetupMatrix{Authenticate,JoinRoom} for setupchange-113 | 1 | -1/+1 | ||
Well, now that we have a JSON parser... Let's improve the user experience a bit. | |||||
2023-11-09 | mod/ssh-keys-import: calculate fingerprint...routeros-7.12beta1-2change-112 | 1 | -1/+1 | ||
... and store it in key-owner, which is descriptive only. This requires RouterOS 7.12beta1 for the 'transform' property for ':convert' command. | |||||
2023-11-07 | global-functions: $ParseDate: drop code for old format...routeros-7.10beta5-2 | 1 | -10/+1 | ||
... and increase required RouterOS. We should probably wait some time before merging this: Even current versions have some hidden places with old format: [admin@MikroTik] > /system/resource/print [...] version: 7.10.2 (stable) build-time: Jul/12/2023 09:45:11 [...] (Though this is written with capital letter and fails anyway...) Something similar goes for `/ip/neighbor`, where format depends on remote devices. Does anybody need to parse this? | |||||
2023-10-27 | dhcp-to-dns: allow multiple records for one mac addresschange-111 | 1 | -1/+1 | ||
Now that we can have differnt name suffixes via networks it makes sense to allow multiple records for one mac address. Also update the wording for messages... | |||||
2023-10-27 | global-functions: introduce $LogPrintOnce | 1 | -0/+23 | ||
This does work just like $LogPrintExit2, except it acts just *once* for each message, until device is rebooted. | |||||
2023-10-26 | global: switch eworm.de to new certificate chain (E1 / ISRG Root X2) | 1 | -4/+0 | ||
old chain: R3 / ISRG Root X1 new chain: E1 / ISRG Root X2 No user interaction or migration is required for existing installations as we install 'E1' and 'ISRG Root X2' for some time already. |