“DoH server connection error: SSL: ssl: CRL not found (6)” error (same as in previous RC versions mentioned in http://forum.mikrotik.com/t/v7-11rc-is-released/168431/1)
I don’t understand this:
http://forum.mikrotik.com/t/v7-11rc-is-released/168431/1
If use-crl is set to yes, RouterOS will check CRL for each certificate in a certificate chain, therefore, an entire certificate chain should be installed into a device - starting from Root CA, intermediate CA (if there are such), and server certificate that is used for specific service.
Why should it require the entire chain, especially “server certificate that is used for specific service”? This cert can be changed on server side at any time.