2023-07-03 07:33:55 +05:30
|
|
|
# Verify the connection at TODO
|
|
|
|
|
|
|
|
# disable doh (temporarily)
|
|
|
|
/ip dns set verify-doh-cert=no
|
|
|
|
|
2025-04-01 08:18:54 +05:30
|
|
|
:local result [/tool fetch url=https://i.pki.goog/r4.pem as-value]
|
|
|
|
:do { :delay 2s } while=( $result->"status" != "finished" )
|
|
|
|
|
|
|
|
/certificate remove [find name~"r4.pem"]
|
|
|
|
/certificate import file-name=r4.pem passphrase=""
|
|
|
|
# /file remove r4.pem
|
2023-07-03 07:33:55 +05:30
|
|
|
|
2025-04-01 08:18:54 +05:30
|
|
|
# Add static DNS entries for the DoH server
|
|
|
|
/ip dns static remove [find name=dns.google]
|
2023-07-03 07:33:55 +05:30
|
|
|
/ip dns static add address=8.8.8.8 name=dns.google
|
|
|
|
/ip dns static add address=8.8.4.4 name=dns.google
|
2025-04-01 08:18:54 +05:30
|
|
|
|
|
|
|
# let's enable DoH
|
2023-07-03 07:33:55 +05:30
|
|
|
/ip dns set use-doh-server=https://dns.google/dns-query verify-doh-cert=yes
|
|
|
|
|
|
|
|
# optional steps
|
2025-04-01 08:18:54 +05:30
|
|
|
# /ip dns set servers=""
|
|
|
|
# /ip dhcp-client set use-peer-dns=no [find]
|
2023-07-03 07:33:55 +05:30
|
|
|
|
|
|
|
# flush existing cache
|
|
|
|
/ip dns cache flush
|
2025-04-01 08:18:54 +05:30
|
|
|
|
|
|
|
# remove this file manually
|
|
|
|
# /file remove google.rsc
|