netwatch-dns: give warning on CRL use

This commit is contained in:
Christian Hesse 2024-09-04 12:02:20 +02:00
parent 9737bfa46a
commit 09dcd51feb

View file

@ -19,6 +19,7 @@
:global IsDNSResolving;
:global IsTimeSync;
:global LogPrint;
:global LogPrintOnce;
:global ParseKeyValueStore;
:global ScriptLock;
@ -126,6 +127,9 @@
:if ($Data != false) do={
:if ([ :typeof [ :find $Data "doh-check-OK" ] ] = "num") do={
/ip/dns/set use-doh-server=($DohServer->"doh-url") verify-doh-cert=yes;
:if ([ /certificate/settings/get crl-use ] = true) do={
$LogPrintOnce warning $ScriptName ("Configured to use CRL, that can cause severe issue!");
}
/ip/dns/cache/flush;
$LogPrint info $ScriptName ("Setting DoH server: " . ($DohServer->"doh-url"));
:error true;