Cannot update RouterOS

RouterOS General
1

Hi,
recently I have discovered that I cannot update my routers. When I click on Check updates I am getting the message Error: File not found. I have tried to download the updates manually from download.mikrotik.com, however I could not do this too. Firefox id giving me the following message:

download.mikrotik.com has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.



Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for download.mikrotik.com. The certificate is only valid for the following names: *.google.com, *.android.com, *.appengine.google.com, *.cloud.google.com, *.crowdsource.google.com, *.g.co, *.gcp.gvt2.com, *.gcpcdn.gvt1.com, *.ggpht.cn, *.gkecnapps.cn, *.google-analytics.com, *.google.ca, *.google.cl, *.google.co.in, *.google.co.jp, *.google.co.uk, *.google.com.ar, *.google.com.au, *.google.com.br, *.google.com.co, *.google.com.mx, *.google.com.tr, *.google.com.vn, *.google.de, *.google.es, *.google.fr, *.google.hu, *.google.it, *.google.nl, *.google.pl, *.google.pt, *.googleadapis.com, *.googleapis.cn, *.googlecnapps.cn, *.googlecommerce.com, *.googlevideo.com, *.gstatic.cn, *.gstatic.com, *.gstaticcnapps.cn, *.gvt1.com, *.gvt2.com, *.metric.gstatic.com, *.urchin.com, *.url.google.com, *.wear.gkecnapps.cn, *.youtube-nocookie.com, *.youtube.com, *.youtubeeducation.com, *.youtubekids.com, *.yt.be, *.ytimg.com, android.clients.google.com, android.com, developer.android.google.cn, developers.android.google.cn, g.co, ggpht.cn, gkecnapps.cn, goo.gl, google-analytics.com, google.com, googlecnapps.cn, googlecommerce.com, source.android.google.cn, urchin.com, > www.goo.gl> , youtu.be, youtube.com, youtubeeducation.com, youtubekids.com, yt.be

Error code: SSL_ERROR_BAD_CERT_DOMAIN

I have noticed that the name *.google.hr (I’m from Croatia) is not among the valid names, so I suspect that this is the source of my problems. What shoud I do?

Regards
Andrija

2

Either somebody hacked your routers or your ISP is redirecting http traffic. If routers are hacked, then careful config examination likely shows some config which shoukln’t be there (proxy enabled, some scripts, DNS redirects, you name it). If ISP is playing games, then you can complain and/or change it.

3

Fortunately my routers are not hacked. I have compared the current configuration with quite old backups and there are no suspicious changes. Also, I don’t think that my ISP was responsible for this, it was rather an malicious attack undergoing. Someone probbably tried to play the man in the middle. Anyway it’s gone away.