|
|
@@ -0,0 +1,26 @@
|
|
|
+#!/bin/bash
|
|
|
+
|
|
|
+set -euo pipefail
|
|
|
+
|
|
|
+NAME="${1:?Usage: revoke-client.sh CLIENT_NAME}"
|
|
|
+
|
|
|
+export EASYRSA_PKI=/openvpn/pki
|
|
|
+
|
|
|
+EASYRSA=/usr/share/easy-rsa/3/easyrsa
|
|
|
+
|
|
|
+echo "Revoking ${NAME}..."
|
|
|
+
|
|
|
+"${EASYRSA}" \
|
|
|
+ --batch \
|
|
|
+ revoke \
|
|
|
+ "${NAME}"
|
|
|
+
|
|
|
+EASYRSA_CRL_DAYS=3650 \
|
|
|
+ "${EASYRSA}" \
|
|
|
+ --batch \
|
|
|
+ gen-crl
|
|
|
+
|
|
|
+chmod 644 "${EASYRSA_PKI}/crl.pem"
|
|
|
+chown 65534:65534 "${EASYRSA_PKI}/crl.pem"
|
|
|
+
|
|
|
+echo "${NAME} revoked."
|
