I have three RouterBoards 951Ui-2HnD, which as I understand it because of memory limitations (they have 128MB RAM) will never be able to run RouterOS v7, and the only commentary I’ve seen about automatic SSL/TLS certificate renewal has pertained to commands available only in RouterOS v7 (and, pretty much, only to Let’s Encrypt).
So, on my 951Ui-2HnD devices, or generally on RouterOS v6, is there any way/script to perform automatic renewals of (real commercial paid, NOT Let’s Encrypt) SSL/TLS certificates?
Fairly sure that they can run ROSv7 with only 128m of memory. The issue isn’t generally memory, but rather storage space in terms of upgrading to v7. I run v7 on plenty of CAP AC devices, which also only have 128MB of memroy without issues.
Fairly sure that you need ROSv7 to do any kind of automated SSL cert upgrade. V6 simply does not support ACME/SCEP/etc. Nothing however that can’t be scripted with an simple http fetch/import either.
Fairly sure you shouldn’t just go and believe everything you read on some random web site.
Interesting, the possibility to try to run RouterOS v7 with 1/4 of the manufacturer’s required (recommended?) memory.
Even if “it works” (now) I’d worry about resource limitations in future. One of the things that make MikroTik equipment so monumentally better than almost anything else is that It Just Works. Stressing memory limits feels likely to break that at some point.
So, on to:
Nothing however that can’t be scripted with an simple http fetch/import either.
Once upon a time, this stuff was easy for me. That was years, professional focus areas, and health ago
Pointers to, hopefully all-on-MikroTik-ROS-v6 scripts, or, if not, then some combination of Windows and ROS scripts, to automate this, very much appreciated!
