allanger/container-openvpn
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Activity

ovpn: Add support for revoking certificates (CRL)

Browse Source 
* Add this much needed missing feature.  Easy RSA makes it... easy.
This commit is contained in:
Kyle Manna
2015-05-11 10:33:56 -07:00
parent bcb55f6255
commit 5021bad597
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/clients.md
View File

@ -26,3 +26,12 @@ After doing so, you will find the following files in each of the `$cn` directori
$cn.crt
$cn.key
ta.key
## Revoking Client Certificates
Revoke `client1`'s certificate and generate the certificate revocation list (CRL):
docker run --rm -it -v /tmp/openvpn:/etc/openvpn kylemanna/openvpn easyrsa revoke client1
docker run --rm -it -v /tmp/openvpn:/etc/openvpn kylemanna/openvpn easyrsa gen-crl
The OpenVPN server will read this change everytime a client connects (no need to restart server) and deny clients access using revoked certificates.