Re: [Openvpn-users] --crl-verify and transitioning from an expiring CA cert

[Jan J. K. <ja...@ni...>]

Try something like

hash=`openssl x509 -hash -noout -in <ca1-file>`
cp <ca1-file> capath/$hash.0
cp <crl1-file> capath/$hash.r0

hash=`openssl x509 -hash -noout -in <ca2-file>`
cp <ca2-file> capath/$hash.0
cp <crl2-file> capath/$hash.r0

and then use
  --capath .../capath
in your openvpn config .

HTH,

JJK


Karl O. Pinc wrote:
>
> On 04/06/2009 09:13:02 PM, Josh Cepek wrote:
>
>> Hopefully this will save someone else the hassle of running strace to
>> see what files are being referenced or digging deep in the OpenSSL
>> docs
>> for answers.
>
> I have not found a good searchable archive for this list.
> Are there any recommendations?
>
>
> Karl <ko...@me...>
> Free Software:  "You don't pay back, you pay forward."
>                  -- Robert A. Heinlein