diff options
author | Othmar Gsenger <otti@anytun.org> | 2008-04-12 11:38:42 +0000 |
---|---|---|
committer | Othmar Gsenger <otti@anytun.org> | 2008-04-12 11:38:42 +0000 |
commit | fffd213c8cba2135afda493d797c41c10354770e (patch) | |
tree | bb5eea1b12871d8c3fed0e687d83be3e504d11b2 /src/openvpn/easy-rsa/revoke-full | |
parent | svn cleanup (diff) |
big svn cleanup
Diffstat (limited to 'src/openvpn/easy-rsa/revoke-full')
-rwxr-xr-x | src/openvpn/easy-rsa/revoke-full | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/src/openvpn/easy-rsa/revoke-full b/src/openvpn/easy-rsa/revoke-full new file mode 100755 index 0000000..66ea03f --- /dev/null +++ b/src/openvpn/easy-rsa/revoke-full @@ -0,0 +1,29 @@ +#!/bin/sh + +# revoke a certificate, regenerate CRL, +# and verify revocation + +CRL=crl.pem +RT=revoke-test.pem + +if test $# -ne 1; then + echo "usage: revoke-full <name>"; + exit 1 +fi + +if test $KEY_DIR; then + cd $KEY_DIR + rm -f $RT + + # revoke key and generate a new CRL + openssl ca -revoke $1.crt -config $KEY_CONFIG + + # generate a new CRL + openssl ca -gencrl -out $CRL -config $KEY_CONFIG + cat ca.crt $CRL >$RT + + # verify the revocation + openssl verify -CAfile $RT -crl_check $1.crt +else + echo you must define KEY_DIR +fi |