I'm aiming to use User Manager for EAP-TLS together with a custom OpenSSL CA I run on a separate computer.

So far it's working fine. The only issue I have is where to put the CRL file.

For sake of simplicity and reliability I'd favour to simply upload my custom CRL file directly to the Router running User Manager, once in a while. But how do I tell ROS to make use of that local CRL file?

I know about Mikrotik's ca-crl-host feature you can use with Mikrotik's built-in CA (/system/certificate). Yet, Is there a way to publish my custom CRL file using the device's http service as well?

Does ROS support fetching CRL files using FTP so I could use built-in FTP service for publishing?

Or is there another way to just tell ROS to use that CRL file from local file system?