Hi,
i'm trying to test revocation with openVPN with this configuration :
a CA root dans 2 subs-CA (CA-1 and CA-2)
1 client issued by CA-1
1 client issued by CA-2
Witch OpenSSL I revoke the two clients with their CA which give me two CRLs (CRL-1.list and CRL-2.list)
Then I stack CRL-1.list and CRL-2.list in CRL.pem and add "--crl-verify crl.pem" in the server conf.
Then only one client is unable to connect to the VPN.
I've read the following topic :
http://openvpn.net/archive/openvpn-devel/2005-05/msg00018.html and i wonder if there another way to resolve the problem ??
Thx
