#!/bin/bash

set -euo pipefail

NAME="${1:?Usage: revoke-client.sh CLIENT_NAME}"

export EASYRSA_PKI=/openvpn/pki

EASYRSA=/usr/share/easy-rsa/3/easyrsa

echo "Revoking ${NAME}..."

"${EASYRSA}" \
  --batch \
  revoke \
  "${NAME}"

EASYRSA_CRL_DAYS=3650 \
  "${EASYRSA}" \
  --batch \
  gen-crl

chmod 644 "${EASYRSA_PKI}/crl.pem"
chown 65534:65534 "${EASYRSA_PKI}/crl.pem"

echo "${NAME} revoked."