mirror.MikroTik/eworm-de.routeros-scripts
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts.git synced 2025-06-21 09:35:46 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

certificate-renew-issued: move code into function

Browse source
This commit is contained in:
Christian Hesse 2024-03-04 13:48:00 +01:00
parent 4cbf9fab74
commit 2d112c0b33
1 changed files with 28 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

25
certificate-renew-issued.rsc
View file

@ -8,19 +8,21 @@
# renew locally issued certificates # renew locally issued certificates
# https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md # https://git.eworm.de/cgit/routeros-scripts/about/doc/certificate-renew-issued.md
:local 0 [ :jobname ];
:global GlobalFunctionsReady; :global GlobalFunctionsReady;
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; } :while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
:global CertIssuedExportPass; :local Main do={
:local ScriptName [ :tostr $1 ];
:global LogPrintExit2; :global CertIssuedExportPass;
:global MkDir;
:global ScriptLock;
$ScriptLock $0; :global LogPrintExit2;
:global MkDir;
:global ScriptLock;
:foreach Cert in=[ /certificate/find where issued expires-after<3w ] do={ $ScriptLock $ScriptName;
:foreach Cert in=[ /certificate/find where issued expires-after<3w ] do={
:local CertVal [ /certificate/get $Cert ]; :local CertVal [ /certificate/get $Cert ];
/certificate/issued-revoke $Cert; /certificate/issued-revoke $Cert;
/certificate/set name=($CertVal->"name" . "-revoked-" . [ /system/clock/get date ]) $Cert; /certificate/set name=($CertVal->"name" . "-revoked-" . [ /system/clock/get date ]) $Cert;
@ -32,12 +34,15 @@ $ScriptLock $0;
/certificate/export-certificate ($CertVal->"name") type=pkcs12 \ /certificate/export-certificate ($CertVal->"name") type=pkcs12 \
file-name=("cert-issued/" . $CertVal->"common-name") \ file-name=("cert-issued/" . $CertVal->"common-name") \
export-passphrase=($CertIssuedExportPass->($CertVal->"common-name")); export-passphrase=($CertIssuedExportPass->($CertVal->"common-name"));
$LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . \ $LogPrintExit2 info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . \
"\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false; "\", exported to \"cert-issued/" . $CertVal->"common-name" . ".p12\".") false;
} else={ } else={
$LogPrintExit2 warning $0 ("Failed creating directory, not exporting certificate.") false; $LogPrintExit2 warning $ScriptName ("Failed creating directory, not exporting certificate.") false;
} }
} else={ } else={
$LogPrintExit2 info $0 ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false; $LogPrintExit2 info $ScriptName ("Issued a new certificate for \"" . $CertVal->"common-name" . "\".") false;
}
} }
} }
$Main [ :jobname ];