Generate a CRL during PKI initialization

2017-05-02 16:42:39 +02:00 · 2017-05-02 16:42:39 +02:00 · dcf3791d54
commit dcf3791d54
parent 76546e1823
1 changed files with 3 additions and 0 deletions
--- a/bin/ovpn_initpki
+++ b/bin/ovpn_initpki
@ -38,3 +38,6 @@ openvpn --genkey --secret $EASYRSA_PKI/ta.key

 # For a server key with a password, manually init; this is autopilot
 easyrsa build-server-full "$OVPN_CN" nopass
+
+# Generate the CRL for client/server certificates revocation.
+easyrsa gen-crl