Dear @normis,NEVER get certificates from 3rd parties, downloading stuff like this from anonymous user google drive is very dangerous.
Do what the DNS documentation tells you to do. Go to the address you configured as your DoH address and download certificate from your browser, by clicking on the padlock icon
https://help.mikrotik.com/docs/display/ ... HTTPS(DoH)
I wanted to bring to your attention that the MikroTik Confluence wiki page about DNS and DoH configuration seems to have outdated information. The page suggests using DigiCertGlobalRootCA.crt.pem for DoH, but this certificate is no longer functional.
In light of recent changes, it would be beneficial for MikroTik support to update the wiki page and provide alternative sources for obtaining root CA certificates that are compatible with RouterOS and services like https://1.1.1.1/dns-query.
I've explored some certificates from Google Trust Services and Cloudflare.com, but they didn't seem to work with my settings. Including verified and up-to-date information on obtaining the correct root CA certificates will greatly assist users in configuring DoH securely.
Thank you for your attention to this matter, and I appreciate your ongoing support.
Statistics: Posted by edyatl — Thu Jan 11, 2024 11:18 pm