Importing certificate from script

RouterOS Scripting
1

Hi,

trying to import a certificate from script :
/certificate import file-name “filename”

The problem is that the script stops execution asking for the passphrase. In my case, no passphrase is needed. When I hit return on the console, script execution continues. How does one automate this ? Tried :putting \r or \n to the console, but that does not seem to work. Help is appreciated.

J

Importing certificate with a script?? need help
2

specify passphares=“”

3

I tried that, but no where in the string :

/certificate import file-name=filename

it seems allowed to add a passphrase=“” option. The cursor turns red when entering this on the command line, and within the script it throws an error. Could you give me the complete syntax for this ?

Many thanks

4

Sorry my mistake this parameter cannot be used from console so you can’t import certificates from script.

5

Oops, that’s a disappointment as I would like to automate the whole procedure. You can imagine the pain when rolling out hundreds of VPN clients !

Is there a workaround where I could send a CR/LF to the console to kind of answer the 'passphrase’question ? I already tried :put “\r” , even with a preceeding delay, but that also does not seem to work.

6

Not directly from RouterOS. You will have to use, for example, expect script that will telnet to router and execute commands.

7

Telnetting to the router to execute commands does not really appeal to me. Before I venture into writing a DLL embedding your API, could you confirm it is possible to import certificates using the API ?

8

it is easy to do that through API:

 /certificate/import
=file-name=cert.pem

and no prompts

9

Thanks for the info. Got a wrapper for the API up and running, and when sending /certificate/print, I do get the information I expected to get back on my socket. Next step to send the /certificate/import command.

10

Sorry for resume old thread. I have same problem.

Can you give the possibility to “import certificates without password” even by scripts ?
It is sufficient when importing “certificate without a password” that is not require to hit return.
This feature should not reduce the safety of the device, there are no passwords in the clear and the private key is already plain text.

I can not use the Mikrotik API and would like to add automatically a certificate using scripts (for example for configure from remote a device by auto-provisiong).

Is a feature possible ?


Thanks
Massimo

11

same issue here, I want to import a cert with a script, but the passphase …dammm :frowning: