Component: certificate

7.21beta2 Testing 2025-Oct-06 (8 months ago)

• added SHA384, SHA512 support for SCEP;
• allow ca-crl-host parameter for issued certificates;
• improved Let's Encrypt logging;
• on certificate import, added the "issued" flag if the certificate store contains the imported certificate's CA and its private key;
• refactored Certificate internal processes;

7.20 Stable 2025-Sep-29 (8 months ago)

• added "Amazon Root CA 1" to built-in root certificate authorities store;
• fixed ACME certificate usage after renewal;
• improved stability after failed import;
• trust built-in root certificate authority store after configuration reset;

7.20rc2 Testing 2025-Sep-11 (9 months ago)

• fixed ACME certificate usage after renewal;
• trust built-in root certificate authority store after configuration reset;

7.20beta4 Testing 2025-Jun-13 (1 year ago)

• added "Amazon Root CA 1" to built-in root certificate authorities store;

7.20beta2 Testing 2025-May-27 (1 year ago)

• improved stability after failed import;

7.19.1 Stable 2025-May-23 (1 year ago)

• fixed support for certificates imported or added in RouterOS v7.4 or earlier (introduced in v7.19);

7.19 Stable 2025-May-22 (1 year ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);
• improve error message when trying to use certificate;
• optimize trust store;

7.19rc3 Testing 2025-May-20 (1 year ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta8 Testing 2025-Apr-04 (1 year ago)

• fixed cloud-dns challenge validation for sn.mynetname.net (CLI only);

7.19beta5 Testing 2025-Mar-12 (1 year ago)

• added built-in root certificate authorities store (additional fixes);

7.19beta2 Testing 2025-Feb-28 (1 year ago)

• added built-in root certificate authorities store;
• do not include CA identity in SCEP POST requests;
• improve error message when trying to use certificate;
• optimize trust store;

7.18 Stable 2025-Feb-24 (1 year ago)

• fixed localized text conversion to UTF-8 on certificate creation;

7.18beta2 Testing 2025-Jan-21 (1 year ago)

• fixed localized text conversion to UTF-8 on certificate creation;

7.17 Stable 2025-Jan-16 (1 year ago)

• do not download CRL if there is not enough free RAM;
• do not show not relevant values for certificate template (CLI only);
• fixed handling of capsman-cap certificates (introduced in v7.16);
• removed unstructured address field support;

7.16.2 Stable 2024-Nov-26 (1 year ago)

• do not download CRL if there is not enough free RAM;
• fixed handling of capsman-cap certificates (introduced in v7.16);

7.17beta5 Testing 2024-Nov-13 (1 year ago)

• do not download CRL if there is no enough free RAM;
• do not show not relevant values for certificate template (CLI only);
• removed unstructured address field support;

7.17beta4 Testing 2024-Oct-18 (1 year ago)

• fixed handling of capsman-cap certificates (introduced in v7.16);

7.16 Stable 2024-Sep-20 (1 year ago)

• added no-key-export parameter for import;
• added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
• automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;
• improved DNS challenge error reporting for Let's Encrypt;
• improved RSA key signature processing speed;
• show validity beyond year 2038;

7.16beta3 Testing 2024-Jun-27 (1 year ago)

• added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
• automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;

7.16beta1 Testing 2024-Jun-05 (2 years ago)

• added no-key-export parameter for import;
• improved DNS challenge error reporting for Let's Encrypt;
• show validity beyond year 2038;

7.15 Stable 2024-May-29 (2 years ago)

• added support for different ACME servers for ssl-certificate (CLI only);
• added support for importing pbes2 encrypted private keys with aes128;
• added trusted parameter for certificate import;
• allow replacing certificate with internal import;
• delete certificate related files automatically from storage after import;
• improved RSA key signature processing speed;

7.15rc1 Testing 2024-Apr-18 (2 years ago)

• allow replacing certificate with internal import;
• delete certificate related files automatically from storage after import;
• improved RSA key signature processing speed;

7.15beta8 Testing 2024-Mar-21 (2 years ago)

• added support for different ACME servers for ssl-certificate (CLI only);

7.15beta6 Testing 2024-Mar-08 (2 years ago)

• added support for importing pbes2 encrypted private keys with aes128;

7.15beta4 Testing 2024-Mar-04 (2 years ago)

• added trusted parameter for certificate import;