#!rsc # RouterOS script: daily-psk.capsman # Copyright (c) 2013-2020 Christian Hesse <mail@eworm.de> # Michael Gisbers <michael@gisbers.de> # https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md # # update daily PSK (pre shared key) # https://git.eworm.de/cgit/routeros-scripts/about/doc/daily-psk.md # # !! Do not edit this file, it is generated from template! :global DailyPskMatchComment; :global Identity; :global LogPrintExit; :global SendNotification; :global UrlEncode; :global WaitForFile; :global WaitFullyConnected; $WaitFullyConnected; # return pseudo-random string for PSK :local GeneratePSK do={ :local Date [ :tostr $1 ]; :global DailyPskSecrets; :local Months { "jan"; "feb"; "mar"; "apr"; "may"; "jun"; "jul"; "aug"; "sep"; "oct"; "nov"; "dec" }; :local Month [ :pick $Date 0 3 ]; :local Day [ :tonum [ :pick $Date 4 6 ] ]; :local Year [ :pick $Date 7 11 ]; :for MIndex from=0 to=[ :len $Months ] do={ :if ($Months->$MIndex = $Month) do={ :set Month ($MIndex + 1); } } :local A ((14 - $Month) / 12); :local B ($Year - $A); :local C ($Month + 12 * $A - 2); :local WeekDay (7000 + $Day + $B + ($B / 4) - ($B / 100) + ($B / 400) + ((31 * $C) / 12)); :set WeekDay ($WeekDay - (($WeekDay / 7) * 7)); :return (($DailyPskSecrets->0->($Day - 1)) . \ ($DailyPskSecrets->1->($Month - 1)) . \ ($DailyPskSecrets->2->$WeekDay)); } :local Seen [ :toarray "" ]; :local Date [ / system clock get date ]; :local NewPsk [ $GeneratePSK $Date ]; :foreach AccList in=[ / caps-man access-list find where comment~$DailyPskMatchComment ] do={ :local Ssid [ / caps-man access-list get $AccList ssid-regexp ]; :local Configuration [ / caps-man configuration get ([ find where ssid=$Ssid ]->0) name ]; :local OldPsk [ / caps-man access-list get $AccList private-passphrase ]; :local Skip 0; :if ($NewPsk != $OldPsk) do={ $LogPrintExit info ("Updating daily PSK for " . $Ssid . " to " . $NewPsk . " (was " . $OldPsk . ")") false; / caps-man access-list set $AccList private-passphrase=$NewPsk; :if ([ :len [ / caps-man interface find where configuration=$Configuration ] ] > 0) do={ :foreach SeenSsid in=$Seen do={ :if ($SeenSsid = $Ssid) do={ $LogPrintExit debug ("Already sent a mail for SSID " . $Ssid . ", skipping.") false; :set Skip 1; } } :if ($Skip = 0) do={ :set Seen ($Seen, $Ssid); :local Url ("https://www.eworm.de/cgi-bin/cqrlogo-wifi.cgi" . \ "?scale=8&level=1&ssid=" . [ $UrlEncode $Ssid ] . "&pass=" . [ $UrlEncode $NewPsk ]); :local Attach "qrcode-daily.png"; :do { / tool fetch check-certificate=yes-without-crl \ $Url dst-path=$Attach; $WaitForFile $Attach; } on-error={ :set Attach ""; } $SendNotification ("daily PSK " . $Ssid) \ ("This is the daily PSK on " . $Identity . ":\n\n" . \ "SSID: " . $Ssid . "\n" . \ "PSK: " . $NewPsk . "\n" . \ "Date: " . $Date . "\n\n" . \ "A client device specific rule must not exist!\n\n" . \ $Url) $Attach; } } } }