| 1234567891011121314151617181920212223242526 |
- #!/bin/bash
- set -euo pipefail
- NAME="${1:?Usage: revoke-client.sh CLIENT_NAME}"
- export EASYRSA_PKI=/openvpn/pki
- EASYRSA=/usr/share/easy-rsa/3/easyrsa
- echo "Revoking ${NAME}..."
- "${EASYRSA}" \
- --batch \
- revoke \
- "${NAME}"
- EASYRSA_CRL_DAYS=3650 \
- "${EASYRSA}" \
- --batch \
- gen-crl
- chmod 644 "${EASYRSA_PKI}/crl.pem"
- chown 65534:65534 "${EASYRSA_PKI}/crl.pem"
- echo "${NAME} revoked."
|
