Generate a CRL during PKI initialization

buchdag · buchdag · commit dcf3791d5412 · 2017-05-10T18:08:11.000+02:00
diff --git a/bin/ovpn_initpki b/bin/ovpn_initpki
@@ -38,3 +38,6 @@ openvpn --genkey --secret $EASYRSA_PKI/ta.key
 
 # For a server key with a password, manually init; this is autopilot
 easyrsa build-server-full "$OVPN_CN" nopass
+
+# Generate the CRL for client/server certificates revocation.
+easyrsa gen-crl
