How to set up internal CA on ROS v6.6???

RouterOS General
1

How to set up internal mikrotik CA???

After merging /certificate ca into /certificate I can’t find a way to setup internal CA.

I’m tried:
[admin@MikroTik] /certificate> ca-set-passphrase
ca-passphrase: ****************
numbers: 0
failure: CA not foundCertificate #0 imported with key, it’s CA cert created with openssl. I find not way to create self-signed internal certificates on v6.6.

2

Have you tried the wiki ??

http://wiki.mikrotik.com/wiki/Manual:System/Certificates
http://wiki.mikrotik.com/wiki/Manual:Create_Certificates

3

Yes, as I understood.

Creating server certificates with openssl is ok, importing certificate in mikrotik for SSTP and other server usage is ok.

Now I want to setup CA in mikrotik and can’t find a way to mark imported CA cert in mikrotik as CA.

Also I can’t find a way to generate CA certs in mikrotik itself (as I remember from v6.5 importing CA certs is not supported).

Here what I have now:
/certificate> print
Flags: K - private-key, D - dsa, L - crl, C - smart-card-key, A - authority, I - issued, R - revoked, E - expired, T - trusted

NAME COMMON-NAME FINGERPRINT

0 K T CA ******** ****** 1d4845eda671f58d9549e9a74812bc1416cf5e46
1 K T h2.. h2.. ebbc97aa7a49c86127fda0d0336fcdee77f484daHow to set “A” (authority) flag on cert #0? Or how generate cert with this flag set?