From dcf3791d541220b38f1938ea9e484b2961686f2c Mon Sep 17 00:00:00 2001
From: Nicolas Duchon <nicolas.duchon@gmail.com>
Date: Tue, 2 May 2017 16:42:39 +0200
Subject: [PATCH] Generate a CRL during PKI initialization

---
 bin/ovpn_initpki | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bin/ovpn_initpki b/bin/ovpn_initpki
index c4c6f1d..14b8ec9 100755
--- a/bin/ovpn_initpki
+++ b/bin/ovpn_initpki
@@ -38,3 +38,6 @@ openvpn --genkey --secret $EASYRSA_PKI/ta.key
 
 # For a server key with a password, manually init; this is autopilot
 easyrsa build-server-full "$OVPN_CN" nopass
+
+# Generate the CRL for client/server certificates revocation.
+easyrsa gen-crl