mirror.MikroTik/pothi.mikrotik-scripts
1
0
Fork 0
mirror of https://github.com/pothi/mikrotik-scripts.git synced 2025-07-21 11:14:55 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use the latest root certificate

Browse source
This commit is contained in:
Pothi Kalimuthu 2025-04-01 08:18:54 +05:30
parent dc9c619851
commit 4d444a66bd
No known key found for this signature in database
GPG key ID: 57069303D36E3093
1 changed files with 15 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

23
doh-scripts/google.rsc
View file

@ -1,22 +1,29 @@
# Verify the connection at TODO
# disable doh (temporarily)
/ip dns set verify-doh-cert=no
/tool fetch url=https://pki.goog/repo/certs/gtsr1.pem once
:delay 5s
/certificate remove [find name~"gtsr1.pem"]
/certificate import file-name=gtsr1.pem passphrase=""
/file remove gtsr1.pem
:local result [/tool fetch url=https://i.pki.goog/r4.pem as-value]
:do { :delay 2s } while=( $result->"status" != "finished" )
/certificate remove [find name~"r4.pem"]
/certificate import file-name=r4.pem passphrase=""
# /file remove r4.pem
# Add static DNS entries for the DoH server
/ip dns static remove [find name=dns.google]
/ip dns static add address=8.8.8.8 name=dns.google
/ip dns static add address=8.8.4.4 name=dns.google
# let's enable DoH
/ip dns set use-doh-server=https://dns.google/dns-query verify-doh-cert=yes
# optional steps
/ip dns set servers=""
/ip dhcp-client set use-peer-dns=no [find]
# /ip dns set servers=""
# /ip dhcp-client set use-peer-dns=no [find]
# flush existing cache
/ip dns cache flush
# remove this file manually
# /file remove google.rsc