Support for ACME/Let's Encrypt certificate management

me++!

Same here.. Maybe as a plugin?

+1 to go please :slight_smile:

++1

Yes +100 on this topic…
What kind (aka type eg. Python, Bash etc.) of scripts are used in RouterOS?
I see this page of course…
http://wiki.mikrotik.com/wiki/Manual:Scripting
but what are they?.. proprietary?
Is there a plugin to run a more common type of script like python or bash shell etc.?

Any other suggestions/recommendations for the best route to solve this problem other then in wishful thinking of a RouterOS update one day?

ROS scripting engine is fully custom like terminal. That route was chosen probably due to performance & security reasons.

Nope.

There’s no way besides external automation and updating certificates via SFTP.

I see thanks for your constructive input. This explains that even NPKs are not possible and require signing too bad.
http://forum.mikrotik.com/t/how-to-create-npk-file/79112/1

So it’s got to be a script only solution I guess. That explains the rash of +1s without the more constructive discussion I’m more familiar with in the open source community these days. So I gather the RouterOS is something I can NOT download, compile and customize either? :open_mouth:

How you generated the certificate and installed ?

+1 for this

Sent from my XT1575 using Tapatalk

MikroTik team: any update on this?

There’s even implementation of ACME client in bash alone: https://github.com/lukas2511/letsencrypt.sh

i would envision this feature to be an extension of the current dynamic dns feature. (this also alleviates any off router requisites)

currently ROS can register your wan ip for an auto-genterated hostname like 62190177tk28.sn.mynetname.net.

lets encypt function could register/update the SSL cert for that same hostname…

+1

Support would be great for SSTP and other SSL services.

+1

+1

I’d doing this on another box and copying the cert over. would be fantastic to have this in routeros!

note… ub****ti’s routers can do this… if that’s at all motivating lol

+1 from me as well

+1 from me, too!

+1 :slight_smile:

Wysłane z mojego GT-I9195 przy użyciu Tapatalka

+1 a little late, but this would be amazing!!!

+1 Thanks.