Component: certificate

7.22rc1 Testing 2026-Feb-06 (8 months ago)

• added support for multiple ACME certificates (additional fixes);

7.22beta6 Development 2026-Jan-28 (9 months ago)

• added support for multiple ACME certificates;

7.21.1 Stable 2026-Jan-19 (9 months ago)

• fixed empty trust store handling in certain cases (introduced in v7.21);

7.22beta3 Development 2026-Jan-14 (9 months ago)

• fixed empty trust store handling in certain cases (introduced in v7.21);

7.21 Stable 2026-Jan-12 (9 months ago)

• added certificate "trust-store" parameter;
• added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter);
• added SHA384, SHA512 support for SCEP;
• allow ca-crl-host parameter for issued certificates;
• fixed incorrect appearance of "invalid-before" and "invalid-after" dates;
• improved logging;
• on certificate import, added the "issued" flag if the certificate store contains the imported certificate's CA and its private key;
• refactored Certificate internal processes;

7.21rc5 Testing 2026-Jan-06 (9 months ago)

• added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter) (additional fixes);

7.22beta1 Development 2026-Jan-02 (9 months ago)

• improved certificate export process;
• improved logging;

7.21rc2 Testing 2025-Dec-15 (10 months ago)

• added certificate "trust-store" parameter (additional fixes);

7.21rc1 Testing 2025-Dec-03 (10 months ago)

• added certificate "trust-store" parameter (additional fixes);

7.21beta9 Testing 2025-Nov-25 (11 months ago)

• added certificate "trust-store" parameter (additional fixes);
• added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter) (additional fixes);

7.21beta8 Testing 2025-Nov-13 (11 months ago)

• added certificate "trust-store" parameter (additional changes);
• added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter) (additional changes);
• fixed certificate signing using imported CA (introduced in 7.21beta1);

7.21beta7 Testing 2025-Nov-07 (11 months ago)

• added certificate "trust-store" parameter (CLI only);
• added option to configure built-in trust store (replaced "builtin-trust-anchors" parameter) (CLI only);

7.21beta5 Testing 2025-Oct-30 (1 year ago)

• improved logging;

7.21beta4 Testing 2025-Oct-28 (1 year ago)

• fixed incorrect appearance of "invalid-before" and "invalid-after" dates;

7.21beta2 Testing 2025-Oct-06 (1 year ago)

• added SHA384, SHA512 support for SCEP;
• allow ca-crl-host parameter for issued certificates;
• improved Let's Encrypt logging;
• on certificate import, added the "issued" flag if the certificate store contains the imported certificate's CA and its private key;
• refactored Certificate internal processes;

7.20 Stable 2025-Sep-29 (1 year ago)

• added "Amazon Root CA 1" to built-in root certificate authorities store;
• fixed ACME certificate usage after renewal;
• improved stability after failed import;
• trust built-in root certificate authority store after configuration reset;

7.20rc2 Testing 2025-Sep-11 (1 year ago)

• fixed ACME certificate usage after renewal;
• trust built-in root certificate authority store after configuration reset;

7.20beta4 Testing 2025-Jun-13 (1 year ago)

• added "Amazon Root CA 1" to built-in root certificate authorities store;

7.20beta2 Testing 2025-May-27 (1 year ago)

• improved stability after failed import;

7.19.1 Stable 2025-May-23 (1 year ago)

• fixed support for certificates imported or added in RouterOS v7.4 or earlier (introduced in v7.19);

7.19 Stable 2025-May-22 (1 year ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);
• improve error message when trying to use certificate;
• optimize trust store;

7.19rc3 Testing 2025-May-20 (1 year ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta8 Testing 2025-Apr-04 (1 year ago)

• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);

7.19beta5 Testing 2025-Mar-12 (1 year ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta2 Testing 2025-Feb-28 (1 year ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• improve error message when trying to use certificate;
• optimize trust store;