pothi.mikrotik-scripts

mirror of https://github.com/pothi/mikrotik-scripts.git synced 2025-06-28 00:40:10 +02:00

History

Pothi Kalimuthu 650e51e378 Update docs		2023-08-25 11:24:56 +05:30
..
cloudflare.rsc	Update DoH scripts	2023-06-29 08:31:49 +05:30
generic.rsc	Add generic DoH script	2023-07-28 10:27:00 +05:30
google.rsc	Add Google DoH script	2023-07-03 07:33:55 +05:30
nextdns.rsc	Update docs; Add nextdns DoH	2023-08-25 11:19:39 +05:30
quad9.rsc	Update docs; Add nextdns DoH	2023-08-25 11:19:39 +05:30
README.md	Update docs	2023-08-25 11:24:56 +05:30

README.md

The following DoH services can be automated for now...

Or you may use the generic script.

Relevant thread in MikroTik forums... https://forum.mikrotik.com/viewtopic.php?f=2&t=160243#p799274

Remember that DoH depends on correct time. So, make sure NTP client is configured. The MikroTik Cloud NTP client service required DNS that in turn requires a working NTP client. So, don't depend on MikroTik Cloud NTP client service.

Root CA certificates that we can use...

https://www.digicert.com/kb/digicert-root-certificates.htm (Download DigiCert Global Root CA)
- https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
- works only for 1.1.1.1 DoH

The following don't work for unknown reason...

Or download most (if not all) root CA certificates from https://curl.se/ca/cacert.pem

Recommended - https://pki.goog/repo/certs/gtsr4.pem (validity: 2038)

NextDNS recommends https://curl.se/ca/cacert.pem too.