Christian Hesse
4d0b4a1ff4
fw-addr-lists: these lists are deprecated and discontinued
...
Any alternatives around?
2025-02-11 14:30:14 +01:00
Christian Hesse
6501c98c82
certs: dns.google switched to 'GTS Root R4'
...
Note that 8.8.8.8 is still at 'GTS Root R1'...
2025-02-05 10:00:26 +01:00
Christian Hesse
87fb70534f
certs: support checking ipv4 or ipv6 only
...
Just run for IPv4 only:
make NOIPV6=1
... or for IPv6 only:
make NOIPV4=1
2025-01-30 22:50:07 +01:00
Christian Hesse
fcb5347e33
certs: split checks for dual, ipv4 & ipv6...
...
... and check both if available.
2025-01-30 22:50:07 +01:00
Miquel Bonastre
aa294b4c67
certs: fix curl false positives...
...
... when default capath contains system certs
If curl has a default capath (debian 12 capath=/etc/ssl/certs)
it will add those certs and return ok to any valid https url,
defeating the intended use of the cacert option in the Makefile
that validates sites and certs.
To avoid that, adding option "--capath /dev/null" overrides
the default value, if any.
Closes: https://github.com/eworm-de/routeros-scripts/pull/88
2025-01-30 22:49:02 +01:00
Christian Hesse
e8b1e19b28
fw-addr-lists: spamhaus.org returned to 'GTS Root R4'
2025-01-22 12:33:46 +01:00
Christian Hesse
3ada3055ff
fw-addr-lists: spamhaus.org returned to 'ISRG Root X1'
...
This reverts commit 4d8dce9769
2024-12-30 19:51:42 +01:00
Christian Hesse
4d8dce9769
fw-addr-lists: spamhaus.org returned to 'GTS Root R4'
2024-11-22 14:06:22 +01:00
Christian Hesse
a6584170c3
certs: check cert for matrix.org
2024-10-29 15:00:26 +01:00
Christian Hesse
7229c756af
fw-addr-lists: spamhaus.org requires 'ISRG Root X1' now
2024-10-23 20:17:44 +02:00
Christian Hesse
9737bfa46a
certs: add poor man's check 😜
2024-09-04 11:55:02 +02:00
