summaryrefslogtreecommitdiff
path: root/ssltools/easy-rsa/2.0/revoke-full
diff options
context:
space:
mode:
Diffstat (limited to 'ssltools/easy-rsa/2.0/revoke-full')
-rwxr-xr-xssltools/easy-rsa/2.0/revoke-full39
1 files changed, 0 insertions, 39 deletions
diff --git a/ssltools/easy-rsa/2.0/revoke-full b/ssltools/easy-rsa/2.0/revoke-full
deleted file mode 100755
index bf3e5fb..0000000
--- a/ssltools/easy-rsa/2.0/revoke-full
+++ /dev/null
@@ -1,39 +0,0 @@
-#!/bin/bash
-
-# revoke a certificate, regenerate CRL,
-# and verify revocation
-
-CRL="crl.pem"
-RT="revoke-test.pem"
-
-if [ $# -ne 1 ]; then
- echo "usage: revoke-full <common-name>";
- exit 1
-fi
-
-if [ "$KEY_DIR" ]; then
- cd "$KEY_DIR"
- rm -f "$RT"
-
- # set defaults
- export KEY_CN=""
- export KEY_OU=""
-
- # revoke key and generate a new CRL
- $OPENSSL ca -revoke "$1.crt" -config "$KEY_CONFIG"
-
- # generate a new CRL -- try to be compatible with
- # intermediate PKIs
- $OPENSSL ca -gencrl -out "$CRL" -config "$KEY_CONFIG"
- if [ -e export-ca.crt ]; then
- cat export-ca.crt "$CRL" >"$RT"
- else
- cat ca.crt "$CRL" >"$RT"
- fi
-
- # verify the revocation
- $OPENSSL verify -CAfile "$RT" -crl_check "$1.crt"
-else
- echo 'Please source the vars script first (i.e. "source ./vars")'
- echo 'Make sure you have edited it to reflect your configuration.'
-fi