From: Flavio <fbc...@gm...> - 2009-12-02 15:06:43
|
> I also would like to know how to "un"-revoke certificates, in case I > would like to do that, and > if it is possible of course. > >> You need to use the --crl-verify. But the crl.pem file must be the one >> which is generated by easy-rsa. Copy this file and configure OpenVPN to >> read this file, that's it. > Could you give me more precise example please? And this is what appen when I use crl-verify: # openvpn --crl-verify crl.pem Options error: You must define TUN/TAP device (--dev) Use --help for more information. Ok, let's define TUN/TAP device using --dev option too: # openvpn --dev tun0 --crl-verify crl.pem Options error: Parameter crl_file can only be specified in TLS-mode, i.e. where --tls-server or --tls-client is also specified. Use --help for more information. And now??? interface tun0 is up as well as the openvpn server. Flavio |