diff --git a/bin/ovpn_initpki b/bin/ovpn_initpki
index c4c6f1d..14b8ec9 100755
--- a/bin/ovpn_initpki
+++ b/bin/ovpn_initpki
@@ -38,3 +38,6 @@ openvpn --genkey --secret $EASYRSA_PKI/ta.key
 
 # For a server key with a password, manually init; this is autopilot
 easyrsa build-server-full "$OVPN_CN" nopass
+
+# Generate the CRL for client/server certificates revocation.
+easyrsa gen-crl