routeros-scripts/INITIAL-COMMANDS.md

Initial commands
================

[◀ Go back to main README](README.md)

These command are inteneded for initial setup. If you are not aware of the
procedure please follow [the long way in detail](README.md#the-long-way-in-detail).

    {
      / tool fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/R3.pem" dst-path="letsencrypt-R3.pem";
      :delay 1s;
      / certificate import file-name=letsencrypt-R3.pem passphrase="";
      :if ([ :len [ / certificate find where fingerprint="67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd" or fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" ] ] != 2) do={
        :error "Something is wrong with your certificates!";
      }
      / file remove "letsencrypt-R3.pem";
      :foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={
        / system script add name=$Script source=([ / tool fetch check-certificate=yes-without-crl ("https://git.eworm.de/cgit/routeros-scripts/plain/" . $Script) output=user as-value]->"data");
      }
      / system script { run global-config; run global-config-overlay; run global-functions; }
      / system scheduler add name="global-scripts" start-time=startup on-event="/ system script { run global-config; run global-config-overlay; run global-functions; }";
      :global CertificateNameByCN;
      $CertificateNameByCN "R3";
      $CertificateNameByCN "ISRG Root X1";
    }

Optional to update the scripts automatically:

    / system scheduler add name="ScriptInstallUpdate" start-time=startup interval=1d on-event=":global ScriptInstallUpdate; \$ScriptInstallUpdate;";

---
[◀ Go back to main README](README.md)  
[▲ Go back to top](#top)
convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`Initial commands`
			`================`

			`[◀ Go back to main README](README.md)`

			`These command are inteneded for initial setup. If you are not aware of the`
			`procedure please follow [the long way in detail](README.md#the-long-way-in-detail).`

			`{`
INITIAL-COMMANDS: also import Let's Encrypt certificate "R3" 2020-12-17 21:01:01 +00:00			`/ tool fetch "https://git.eworm.de/cgit/routeros-scripts/plain/certs/R3.pem" dst-path="letsencrypt-R3.pem";`
convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`:delay 1s;`
INITIAL-COMMANDS: also import Let's Encrypt certificate "R3" 2020-12-17 21:01:01 +00:00			`/ certificate import file-name=letsencrypt-R3.pem passphrase="";`
drop certificate DST Root CA X3 Let's Encrypt planned the transition to ISRG's root certificate ("ISRG Root X1") on July 8, 2019, but postponed several times. Finally they found another solution: A certificate 'ISRG Root X1', but cross-signed with 'DST Root CA X3' and with a livetime that exceeds that of the root CA. This is said to work for most operating system where root certificate authorities are just 'trust anchors'. I doubt this is true for RouterOS, where certificates are just imported into the certificate store. So let's migrate to 'ISRG Root X1' now. 2019-04-30 13:11:54 +00:00			`:if ([ :len [ / certificate find where fingerprint="67add1166b020ae61b8f5fc96813c04c2aa589960796865572a3c7e737613dfd" or fingerprint="96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6" ] ] != 2) do={`
convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`:error "Something is wrong with your certificates!";`
			`}`
INITIAL-COMMANDS: also import Let's Encrypt certificate "R3" 2020-12-17 21:01:01 +00:00			`/ file remove "letsencrypt-R3.pem";`
completely replace script-updates with $ScriptInstallUpdate 2020-03-23 11:21:38 +00:00			`:foreach Script in={ "global-config"; "global-config-overlay"; "global-functions" } do={`
convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`/ system script add name=$Script source=([ / tool fetch check-certificate=yes-without-crl ("https://git.eworm.de/cgit/routeros-scripts/plain/" . $Script) output=user as-value]->"data");`
			`}`
			`/ system script { run global-config; run global-config-overlay; run global-functions; }`
global-config: dropped $ScriptUpdatesIgnore, use ignore flag in comment 2020-07-14 14:32:17 +00:00			`/ system scheduler add name="global-scripts" start-time=startup on-event="/ system script { run global-config; run global-config-overlay; run global-functions; }";`
INITIAL-COMMANDS: declare $CertificateNameByCN 2020-07-16 08:56:24 +00:00			`:global CertificateNameByCN;`
INITIAL-COMMANDS: also import Let's Encrypt certificate "R3" 2020-12-17 21:01:01 +00:00			`$CertificateNameByCN "R3";`
INITIAL-COMMANDS: use function to rename certificates 2020-04-24 12:55:41 +00:00			`$CertificateNameByCN "ISRG Root X1";`
convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`}`

README: optional scheduler to update scripts automatically 2020-11-01 21:20:02 +00:00			`Optional to update the scripts automatically:`

			`/ system scheduler add name="ScriptInstallUpdate" start-time=startup interval=1d on-event=":global ScriptInstallUpdate; \$ScriptInstallUpdate;";`

convert initial commands from script to page This is not intended for installation... 2020-03-20 11:51:28 +00:00			`---`
			`[◀ Go back to main README](README.md)`
			`[▲ Go back to top](#top)`