problem dns over https

RouterOS General
1

I want to use a dns over https by mullvad

https://certs.godaddy.com/repository

GoDaddy Class 2 Certification Authority Root Certificate - G2

config a mikrotik:

/tool fetch url=https://certs.godaddy.com/repository/gdroot-g2.crt

/certificate import file-name=gdroot-g2.crt passphrase=“”

/ip dns set use-doh-server=https://doh.mullvad.net/dns-query verify-doh-cert=yes

/ip dns/ cache/ flush

doesn’t work
please help me

2

[SOLVED]

Do not work, use only TLS 1.2 / TLS 1.3 with unsupported elliptic ciphers from MikroTik products.

Only
TLS 1.3
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
TLS_AES_128_GCM_SHA256
and
TLS 1.2
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

[rex@net] >tool fetch url=“https://doh.mullvad.net/dns-query”
status: failed

failure: ssl connection error: internal error (6)

3

use only TLS 1.2 / TLS 1.3 with unsupported elliptic ciphers from MikroTik products.

how to use it ?


tool fetch url="> https://doh.mullvad.net/dns-query> " status: failed

its problem in RouterOS?

4

No, is simply unsupported

5

its RouterOS7 unsupported?

6

I must rewrite the reply on post #2 ???

7

ok. thank you.
unsupported elliptic ciphers from MikroTik products - problem in ROS.

8

Was considering switching from Cloudflare to Mullvad but saw this. Is it still unsupported?

9

Use

/tool fetch url=https://curl.se/ca/cacert.pem

/certificate import file-name=cacert.pem passphrase=“”