mirror.MikroTik/pothi.mikrotik-scripts
1
0
Fork 0
mirror of https://github.com/pothi/mikrotik-scripts.git synced 2025-07-09 22:24:28 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update DoH scripts

Browse source
This commit is contained in:
Pothi Kalimuthu 2023-06-29 08:31:49 +05:30
parent 75bec31c42
commit 7ab9c9d776
No known key found for this signature in database
GPG key ID: 08202A469C2D0E06
2 changed files with 29 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

19
doh-scripts/README.md
View file

@ -1,8 +1,25 @@
TODO:
- DoH script for nextdns
- DoH script for quad9
# important thread... https://forum.mikrotik.com/viewtopic.php?f=2&t=160243#p799274
Remember that DoH depends on correct time. So, make sure NTP client is configured. The MikroTik Cloud NTP client service required DNS that in turn requires a working NTP client. So, don't depend on MikroTik Cloud NTP client service.
NextDNS recommends https://curl.se/ca/cacert.pem too.
Root CA certificates that we can use...
- https://www.digicert.com/kb/digicert-root-certificates.htm (Download DigiCert Global Root CA)
- https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
- works **only** for 1.1.1.1 DoH
# the following don't work for unknown reason...
- https://pki.goog/repository/
- https://www.digicert.com/kb/digicert-root-certificates.htm
- https://support.globalsign.com/ca-certificates/root-certificates/globalsign-root-certificates
- https://www.amazontrust.com/repository/
Or download most (if not all) root CA certificates from https://curl.se/ca/cacert.pem