netwatch-dns: give warning on CRL use

This commit is contained in:
Christian Hesse 2024-09-04 12:02:20 +02:00
parent 9737bfa46a
commit 09dcd51feb

View file

@ -19,6 +19,7 @@
:global IsDNSResolving; :global IsDNSResolving;
:global IsTimeSync; :global IsTimeSync;
:global LogPrint; :global LogPrint;
:global LogPrintOnce;
:global ParseKeyValueStore; :global ParseKeyValueStore;
:global ScriptLock; :global ScriptLock;
@ -126,6 +127,9 @@
:if ($Data != false) do={ :if ($Data != false) do={
:if ([ :typeof [ :find $Data "doh-check-OK" ] ] = "num") do={ :if ([ :typeof [ :find $Data "doh-check-OK" ] ] = "num") do={
/ip/dns/set use-doh-server=($DohServer->"doh-url") verify-doh-cert=yes; /ip/dns/set use-doh-server=($DohServer->"doh-url") verify-doh-cert=yes;
:if ([ /certificate/settings/get crl-use ] = true) do={
$LogPrintOnce warning $ScriptName ("Configured to use CRL, that can cause severe issue!");
}
/ip/dns/cache/flush; /ip/dns/cache/flush;
$LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url")); $LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url"));
:error true; :error true;