summaryrefslogtreecommitdiff
path: root/openvpn/easy-rsa/Windows/revoke-full.bat
diff options
context:
space:
mode:
authorChristian Pointner <equinox@anytun.org>2007-06-16 01:08:34 +0000
committerChristian Pointner <equinox@anytun.org>2007-06-16 01:08:34 +0000
commitbd379231f2d4b22b473fd7f428e518462fb7476a (patch)
tree7643fa58ffe7123cc08e7784f204efe9f5b5970e /openvpn/easy-rsa/Windows/revoke-full.bat
parentremoved openvpn source files (diff)
added all the openvpn stuff
Diffstat (limited to 'openvpn/easy-rsa/Windows/revoke-full.bat')
-rw-r--r--openvpn/easy-rsa/Windows/revoke-full.bat13
1 files changed, 13 insertions, 0 deletions
diff --git a/openvpn/easy-rsa/Windows/revoke-full.bat b/openvpn/easy-rsa/Windows/revoke-full.bat
new file mode 100644
index 0000000..ef2e4b5
--- /dev/null
+++ b/openvpn/easy-rsa/Windows/revoke-full.bat
@@ -0,0 +1,13 @@
+@echo off
+cd %HOME%
+rem revoke cert
+openssl ca -revoke %KEY_DIR%\%1.crt -config %KEY_CONFIG%
+rem generate new crl
+openssl ca -gencrl -out %KEY_DIR%\crl.pem -config %KEY_CONFIG%
+rem test revocation
+rem first concatinate ca cert with newly generated crl
+copy %KEY_DIR%\ca.crt+%KEY_DIR%\crl.pem %KEY_DIR%\revoke_test_file.pem
+rem now verify the revocation
+openssl verify -CAfile %KEY_DIR%\revoke_test_file.pem -crl_check %KEY_DIR%\%1.crt
+rem delete temporary test file
+del /q %KEY_DIR%\revoke_test_file.pem