Reply To: API SSL support & Device Group permission scoping issues

[Hugo RIANT]

Hi Sepehr,

Thank you for the detailed response and for prioritizing both the permission scoping fix and the native API SSL support. That’s great news.

Regarding the API SSL patch, I actually already found a working solution while exploring the code. Here is what I modified:

1. /app/py/libs/util.py
Added ‘import ssl’ at the top, then updated the build_api_options function to use port 8729 with the following SSL options:
‘ssl’: True, ‘ssl_cafile’: None, ‘ssl_capath’: None, ‘ssl_verify’: False, ‘ssl_verify_hostname’: False, ‘ssl_force_no_certificate’: True, ‘hostname’: None

2. /app/py/bgtasks.py
Same update applied to the two options dictionaries inside scan_with_ip which both had ‘ssl’: False hardcoded.

This works correctly on our end with RouterOS v7 and no certificate on the MikroTik side.

Regarding the Customer Portal feature planned for the Pro version — this is very relevant to our use case. Could you clarify how it works exactly and what it covers? Also, given that we are currently in a POC phase with only a few devices, would it be possible to access the Pro features for a limited period (one or two months) to evaluate the Customer Portal before committing to a full deployment?

Best regards,
Hugo