chore(release): 1.47.0

CHANGELOG.md

@@ -1,3 +1,16 @@
+## [1.47.0](https://github.com/terraform-routeros/terraform-provider-routeros/compare/v1.46.3...v1.47.0) (2024-05-04)
+
+
+### Features
+
+* add ability to sign certificates with scep ([1dce5af](https://github.com/terraform-routeros/terraform-provider-routeros/commit/1dce5af9a010463974df011e8d530a792e29f8f2))
+
+
+### Bug Fixes
+
+* add challenge_password parameter for system_certificate resource ([d933589](https://github.com/terraform-routeros/terraform-provider-routeros/commit/d933589a186f86afad0ba609c05101ce26111149))
+* fix changing sign data in routeros_system_certificate resource ([83848f9](https://github.com/terraform-routeros/terraform-provider-routeros/commit/83848f9dac2247c8b60ace492f62d448b85950cb))
+
 ## [1.46.3](https://github.com/terraform-routeros/terraform-provider-routeros/compare/v1.46.2...v1.46.3) (2024-04-27)
 
 

docs/data-sources/firewall.md

@@ -69,7 +69,7 @@ Read-Only:
 - `creation_time` (String)
 - `disabled` (Boolean)
 - `dynamic` (Boolean)
-- `id` (String) The ID of this resource.
+- `id` (String)
 - `list` (String)
 - `timeout` (String)
 
@@ -108,7 +108,7 @@ Read-Only:
 - `fragment` (Boolean)
 - `hotspot` (String)
 - `icmp_options` (String)
-- `id` (String) The ID of this resource.
+- `id` (String)
 - `in_bridge_port` (String)
 - `in_bridge_port_list` (String)
 - `in_interface` (String)
@@ -189,7 +189,7 @@ Read-Only:
 - `fragment` (Boolean)
 - `hotspot` (String)
 - `icmp_options` (String)
-- `id` (String) The ID of this resource.
+- `id` (String)
 - `in_bridge_port` (String)
 - `in_bridge_port_list` (String)
 - `in_interface` (String)
@@ -265,7 +265,7 @@ Read-Only:
 - `hotspot` (String)
 - `hw_offload` (Boolean)
 - `icmp_options` (String)
-- `id` (String) The ID of this resource.
+- `id` (String)
 - `in_bridge_port` (String)
 - `in_bridge_port_list` (String)
 - `in_interface` (String)

docs/resources/radius.md

@@ -29,7 +29,7 @@ resource "routeros_radius" "user_manager" {
 - `protocol` (String) An option specifies the protocol to use when communicating with the RADIUS Server.
 - `realm` (String) Explicitly stated realm (user domain), so the users do not have to provide proper ISP domain name in the user name.
 - `secret` (String, Sensitive) The shared secret to access the RADIUS server.
-- `service` (String) A comma-separated list of router services that will use the RADIUS server. Possible values: `hotspot`, `login`, `ppp`, `wireless`, `dhcp`.
+- `service` (String) A comma-separated list of router services that will use the RADIUS server. Possible values: `hotspot`, `login`, `ppp`, `wireless`, `dhcp`, `ipsec`, `dot1x`.
 - `src_address` (String) Source IPv4/IPv6 address of the packets sent to the RADIUS server.
 - `timeout` (String) A timeout, after which the request should be resent.
 

docs/resources/system_certificate.md

@@ -44,6 +44,16 @@ resource "routeros_system_certificate" "unsigned_crt" {
   key_size         = "1024"
   subject_alt_name = "DNS:router.lan,DNS:myrouter.lan,IP:192.168.88.1"
 }
+
+resource "routeros_system_certificate" "scep_client" {
+  name        = "SCEP-Client"
+  common_name = "scep-client.crt"
+  key_usage   = ["digital-signature", "key-agreement", "tls-client"]
+
+  sign_via_scep {
+    scep_url = "http://scep.server/scep/test"
+  }
+}
 ```
 
 <!-- schema generated by tfplugindocs -->
@@ -64,6 +74,7 @@ resource "routeros_system_certificate" "unsigned_crt" {
 - `locality` (String) Locality Name (eg, city).
 - `organization` (String) Organizational Unit Name (eg, section)
 - `sign` (Block Set) (see [below for nested schema](#nestedblock--sign))
+- `sign_via_scep` (Block Set) (see [below for nested schema](#nestedblock--sign_via_scep))
 - `state` (String) State or Province Name (full name).
 - `subject_alt_name` (String) SANs (subject alternative names).
 - `trusted` (Boolean) If set to yes certificate is included 'in trusted certificate chain'.
@@ -76,6 +87,7 @@ resource "routeros_system_certificate" "unsigned_crt" {
 - `ca` (String)
 - `ca_crl_host` (String)
 - `ca_fingerprint` (String)
+- `challenge_password` (String, Sensitive) A challenge password for scep client.
 - `crl` (String)
 - `digest_algorithm` (Boolean)
 - `dsa` (Boolean)
@@ -105,6 +117,21 @@ Optional:
 - `ca` (String) Which CA to use if signing issued certificates.
 - `ca_crl_host` (String) CRL host if issuing CA certificate.
 
+
+<a id="nestedblock--sign_via_scep"></a>
+### Nested Schema for `sign_via_scep`
+
+Required:
+
+- `scep_url` (String) HTTP URL to the SCEP server.
+
+Optional:
+
+- `ca_identity` (String) SCEP CA identity.
+- `challenge_password` (String, Sensitive) A challenge password.
+- `on_smart_card` (Boolean) Whether to store a private key on smart card if hardware supports it.
+- `refresh` (Boolean) Check certificate expiration and refresh it if expired.
+
 ## Import
 Import is supported using the following syntax:
 ```shell

package.json

@@ -1,6 +1,6 @@
 {
     "name": "terraform-provider-routeros",
-    "version": "1.46.3",
+    "version": "1.47.0",
     "repository": {
         "type": "git",
         "url": "https://github.com/terraform-routeros/terraform-provider-routeros"