Community discussions

Search found 12 matches

by rpr
Wed Dec 05, 2018 12:29 pm
Forum: General
Topic: backup,critical error creating backup file, ROS 6.42.1
Replies: 29
Views: 6331

Re: backup,critical error creating backup file, ROS 6.42.1

The same issue here after upgrade from RouterOS 6.43.1 to 6.43.7. Advice from post #16 solved the issue. Kudos for that! Can anyone explain the root cause of the problem? It seams that the backup command is not able to read the SSH authentication keys (private + public key pair) to include them in t...
by rpr
Tue Jan 03, 2017 12:27 pm
Forum: General
Topic: winbox.exe blocked by firewall antivirus
Replies: 0
Views: 370

winbox.exe blocked by firewall antivirus

Hello! I had difficulty in downloading current Winbox 3.7 from http://www.mikrotik.com/download because it is blocked by AV protection of my corporate firewall (SonicWall) - it says the winbox.exe contains Nimnul.D_22 Trojan. I reported the false positive at https://threat_samples.eng.sonicwall.com/...
by rpr
Tue Nov 17, 2015 6:07 pm
Forum: General
Topic: how to backup router configuration including SSL certificates
Replies: 4
Views: 1787

Re: how to backup router configuration including SSL certificates

After some testing I can conclude that certificates don't work even when you restore the system backup to the router with the same hardware and RouterOS version, which is an old issue that should be fixed, IMHO. After the restore you have to import the SSL certificate again. Usually you have to uplo...
by rpr
Thu Nov 12, 2015 4:42 pm
Forum: General
Topic: how to backup router configuration including SSL certificates
Replies: 4
Views: 1787

how to backup router configuration including SSL certificates

Hi! We use a RB750GL with RouterOS 6.30 in production and also got another spare RB750GL (upgraded to RouterOS 6.33) for the case of hardware malfunction of the first one. We would like to copy the configuration from the production router to the spare one so that the production router can be quickly...
by rpr
Sun Jul 12, 2015 12:54 am
Forum: General
Topic: RouterOS 6.30rc17
Replies: 12
Views: 3180

Re: RouterOS 6.30rc17

I'm still getting an error: > /system identity export # jul/11/2015 23:49:35 by RouterOS 6.30 # software id = JLR6-SIQJ # /system identity set name=gw.example.com > /ip ssh set ? Change properties of one or several items. always-allow-password-login -- allow password login when public key authorizat...
by rpr
Fri Jul 10, 2015 8:44 pm
Forum: General
Topic: how to import SSL certificate and private key
Replies: 3
Views: 12894

Re: how to import SSL certificate and private key

I've found a solution to this -- here are the steps (on RouterOS 6.29): In Files remove old files used to install a previous certificate ( certificate-request_key.pem and *.cer ). Prepare the files for new certificate(s): gw.example.com.cer -- the wildcard certificate issued by your CA (e.g. GeoTrus...
by rpr
Fri Jul 10, 2015 8:08 pm
Forum: General
Topic: RouterOS 6.30rc17
Replies: 12
Views: 3180

Re: RouterOS 6.30rc17

p.s. it is called '/ ip ssh strong-crypto' there is a typo in the changelog. On v. 6.30 I've tried to run that command but it gives an error: > /ip ssh strong-crypto bad command name strong-crypto (line 1 column 9) I have the following packages enabled: advanced-tools, routeros-mipsbe, routing, sec...
by rpr
Wed Jul 08, 2015 12:21 pm
Forum: General
Topic: how to import SSL certificate and private key
Replies: 3
Views: 12894

Re: how to import SSL certificate and private key

The common CSR & private key will work single server only. If you are securing your domain on multiple servers you need to create new CSR & private for each single server. My experience is that you can secure multiple servers with a single certificate: On the first server: - generate private key - ...
by rpr
Tue Jul 07, 2015 7:00 pm
Forum: General
Topic: how to import SSL certificate and private key
Replies: 3
Views: 12894

how to import SSL certificate and private key

Hi! On a web server serving https://www.example.com (just an example) I have generated a private key and got corresponding SSL certificate from a CA. The certificate is a wildcard certificate valid for *.example.com. Is it possible to import such SSL certificate and the private key to RouterOS 6.29 ...
by rpr
Mon Jun 01, 2015 11:16 am
Forum: General
Topic: RouterOS 6.29 and mitigating Logjam vulnerability
Replies: 0
Views: 342

RouterOS 6.29 and mitigating Logjam vulnerability

Hi! On https://weakdh.org I've read that TLS protocol has some security weaknesses if it uses DH key exchange. The guide on https://weakdh.org/sysadmin.html recommends using a unique DH group (of primes) on HTTP servers and SSH servers. In the RouterOS v. 6.29 release notes I can see the following l...
by rpr
Fri Feb 07, 2014 1:58 pm
Forum: General
Topic: after upgrade to 6.3 cannot generate certificate-request
Replies: 33
Views: 26493

Re: after upgrade to 6.3 cannot generate certificate-request

This is how I solved this issue on RouterOS 6.9. First, create a new certificate template (for the router with address host.foo.bar): /certificate add name=cert1 common-name=host.foo.bar key-size=2048 country=XX state=MyState locality=MyCity organization=foo.bar subject-alt-name=email:user@foo.bar C...
by rpr
Tue Oct 25, 2011 6:49 pm
Forum: General
Topic: RouterOS 5.7 installation problem - no harddrives found
Replies: 2
Views: 1238

RouterOS 5.7 installation problem - no harddrives found

I'm not able to install RouterOS 5.7 on HP Compaq 6005 Pro PC (P/N: XG068EA#BED) which has AMD Phenom II X2 B55 3 GHz, 2 GiB DDR3 1066 MHz, AMD 785G chipset. The PC boots normally to Windows 7. After booting with the installation CD, ISOLINUX says: Looking for harddrives ... FATAL ERROR: no harddriv...