Crash_Override/routeros-scripts
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts synced 2024-05-14 08:04:19 +00:00
Code Issues Projects Releases Packages Wiki Activity

check-certificates: just change certificates, no loop

Browse source
This commit is contained in:
Christian Hesse 2019-04-10 13:56:44 +02:00
parent b93d4d40bc
commit c0b73d6e92
1 changed files with 4 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
check-certificates
View file

@ -43,25 +43,17 @@
:local CertNew [ / certificate find where common-name=$CommonName fingerprint!=$FingerPrint expires-after>3w ];
:local CertNameNew [ / certificate get $CertNew name ];
:foreach IpService in=[ / ip service find where certificate=$CertName ] do={
/ ip service set $IpService certificate=$CertNameNew;
}
/ ip service set certificate=$CertNameNew [ find where certificate=$CertName ];
:do {
:foreach Identity in=[ / ip ipsec identity find where certificate=$CertName ] do={
/ ip ipsec identity set $Identity certificate=$CertNameNew;
}
:foreach Identity in=[ / ip ipsec identity find where remote-certificate=$CertName ] do={
/ ip ipsec identity set $Identity remote-certificate=$CertNameNew;
}
/ ip ipsec identity set certificate=$CertNameNew [ find where certificate=$CertName ];
/ ip ipsec identity set remote-certificate=$CertNameNew [ find where remote-certificate=$CertName ];
} on-error={
:log debug ("Setting IPSEC certificates failed. Package 'security' not installed?");
}
:do {
:foreach Hotspot in=[ / ip hotspot profile find where ssl-certificate=$CertName ] do={
/ ip hotspot profile set $Hotspot ssl-certificate=$CertNameNew;
}
/ ip hotspot profile set ssl-certificate=$CertNameNew [ find where ssl-certificate=$CertName ];
} on-error={
:log debug ("Setting hotspot certificates failed. Package 'hotspot' not installed?");
}