From bd379231f2d4b22b473fd7f428e518462fb7476a Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sat, 16 Jun 2007 01:08:34 +0000 Subject: added all the openvpn stuff --- openvpn/easy-rsa/Windows/revoke-full.bat | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 openvpn/easy-rsa/Windows/revoke-full.bat (limited to 'openvpn/easy-rsa/Windows/revoke-full.bat') diff --git a/openvpn/easy-rsa/Windows/revoke-full.bat b/openvpn/easy-rsa/Windows/revoke-full.bat new file mode 100644 index 0000000..ef2e4b5 --- /dev/null +++ b/openvpn/easy-rsa/Windows/revoke-full.bat @@ -0,0 +1,13 @@ +@echo off +cd %HOME% +rem revoke cert +openssl ca -revoke %KEY_DIR%\%1.crt -config %KEY_CONFIG% +rem generate new crl +openssl ca -gencrl -out %KEY_DIR%\crl.pem -config %KEY_CONFIG% +rem test revocation +rem first concatinate ca cert with newly generated crl +copy %KEY_DIR%\ca.crt+%KEY_DIR%\crl.pem %KEY_DIR%\revoke_test_file.pem +rem now verify the revocation +openssl verify -CAfile %KEY_DIR%\revoke_test_file.pem -crl_check %KEY_DIR%\%1.crt +rem delete temporary test file +del /q %KEY_DIR%\revoke_test_file.pem -- cgit v1.2.3