An issue has been published regarding how RouterOS services decide which certificate authorities (CAs) to trust. Several RouterOS services, such as OpenVPN, CAPsMAN and Dot1X (802.1X), use certificates to verify who they are talking to. In affected versions these services all use the same system-wide certificate store, so any CA certificate that is trusted on the router is trusted by every service.
Discovery
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules