Component: certificate

7.20beta2 Testing 2025-May-27 (11 months ago)

• improved stability after failed import;

7.19.1 Stable 2025-May-23 (11 months ago)

• fixed support for certificates imported or added in RouterOS v7.4 or earlier (introduced in v7.19);

7.19 Stable 2025-May-22 (11 months ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);
• improve error message when trying to use certificate;
• optimize trust store;

7.19rc3 Testing 2025-May-20 (11 months ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta8 Testing 2025-Apr-04 (1 year ago)

• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);

7.19beta5 Testing 2025-Mar-12 (1 year ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta2 Testing 2025-Feb-28 (1 year ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• improve error message when trying to use certificate;
• optimize trust store;

7.18 Stable 2025-Feb-24 (1 year ago)

• fixed localized text conversion to UTF-8 on certificate creation;

7.18beta2 Testing 2025-Jan-21 (1 year ago)

• fixed localized text conversion to UTF-8 on certificate creation;

7.17 Stable 2025-Jan-16 (1 year ago)

• do not download CRL if there is not enough free RAM;
• do not show not relevant values for certificate template (CLI only);
• fixed handling of capsman-cap certificates (introduced in v7.16);
• removed unstructured address field support;

7.16.2 Stable 2024-Nov-26 (1 year ago)

• do not download CRL if there is not enough free RAM;
• fixed handling of capsman-cap certificates (introduced in v7.16);

7.17beta5 Testing 2024-Nov-13 (1 year ago)

• do not download CRL if there is no enough free RAM;
• do not show not relevant values for certificate template (CLI only);
• removed unstructured address field support;

7.17beta4 Testing 2024-Oct-18 (1 year ago)

• fixed handling of capsman-cap certificates (introduced in v7.16);

7.16 Stable 2024-Sep-20 (1 year ago)

• added no-key-export parameter for import;
• added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
• automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;
• improved DNS challenge error reporting for Let's Encrypt;
• improved RSA key signature processing speed;
• show validity beyond year 2038;

7.16beta3 Testing 2024-Jun-27 (1 year ago)

• added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
• automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;

7.16beta1 Testing 2024-Jun-05 (1 year ago)

• added no-key-export parameter for import;
• improved DNS challenge error reporting for Let's Encrypt;
• show validity beyond year 2038;

7.15 Stable 2024-May-29 (1 year ago)

• added support for different ACME servers for ssl-certificate (CLI only);
• added support for importing pbes2 encrypted private keys with aes128;
• added trusted parameter for certificate import;
• allow replacing certificate with internal import;
• delete certificate related files automatically from storage after import;
• improved RSA key signature processing speed;

7.15rc1 Testing 2024-Apr-18 (2 years ago)

• allow replacing certificate with internal import;
• delete certificate related files automatically from storage after import;
• improved RSA key signature processing speed;

7.15beta8 Testing 2024-Mar-21 (2 years ago)

• added support for different ACME servers for ssl-certificate (CLI only);

7.15beta6 Testing 2024-Mar-08 (2 years ago)

• added support for importing pbes2 encrypted private keys with aes128;

7.15beta4 Testing 2024-Mar-04 (2 years ago)

• added trusted parameter for certificate import;

7.14 Stable 2024-Feb-29 (2 years ago)

• improved certificate validation performance;

7.14beta9 Testing 2024-Feb-01 (2 years ago)

• improved certificate validation performance;

7.13 Stable 2023-Dec-14 (2 years ago)

• add support for multiple DNS names for Let's Encrypt;
• added HTTP redirect support for CRL download;
• added support for certificates with key size 16384;
• fixed CRL updating;
• fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
• improved CRL signature verification and download error messages;
• improved initial certificate creation using SCEP;
• use error topic for CRL update failures;

7.13rc4 Testing 2023-Dec-12 (2 years ago)

• fixed CRL updating;