Come per la generazione dell’ambiente anche per la revoca dei certificati ci sono alcune piccole differenze di seguito un reale esempio di revoca certificato
root@pc0:/etc/openvpn/easy-rsa# ./easyrsa revoke client30
* Notice:
Using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars

* WARNING:

Move your vars file to your PKI folder, where it is safe!

* Notice:
Using SSL: openssl OpenSSL 3.0.20 7 Apr 2026 (Library: OpenSSL 3.0.20 7 Apr 2026)

Please confirm you wish to revoke the certificate
with the following subject:

subject=
commonName                = client30

serial-number: F7B9756FCE967BDDB6A74F8D810D1428

Type the word ‘yes’ to continue, or any other input to abort.
Continue with revocation: yes

Using configuration from /etc/openvpn/easy-rsa/pki/fa72f7d7/temp.04f2094e
Revoking Certificate F7B9756FCE967BDDB6A74F8D810D1428.
Database updated

* Notice:

IMPORTANT!!!

Revocation was successful. You must run gen-crl and upload a CRL to your
infrastructure in order to prevent the revoked cert from being accepted.

root@pc0:/etc/openvpn/easy-rsa# ./easyrsa gen-crl
* Notice:
Using Easy-RSA configuration from: /etc/openvpn/easy-rsa/vars

* WARNING:

Move your vars file to your PKI folder, where it is safe!

* Notice:
Using SSL: openssl OpenSSL 3.0.20 7 Apr 2026 (Library: OpenSSL 3.0.20 7 Apr 2026)

Using configuration from /etc/openvpn/easy-rsa/pki/06d58cf7/temp.b46ef1c8

* Notice:

An updated CRL has been created.
CRL file: /etc/openvpn/easy-rsa/pki/crl.pem
/etc/init.d/openvpn restart per far digerire le modifiche e con questi passaggi la questione è risolta

Tagged with: Devuan5 | openvpn | revoke

Categorised as: Blog | Linux | Networking | VPN | Work

Comments are disabled on this post