Hello, i have a problem using crl.pem to revoke more than one clients. i followed this guide to revoke a first certificate : http://blog.remibergsma.com/2013/02/27/improving-openvpn-security-by-revoking-unneeded-certificates/ [code]cd /usr/share/easy-rsa/2.0/ crl-verify crl.pem >> server.conf source ./vars /revoke-full client[/code] then i run the command: [code]openssl crl -in keys/crl.pem -text[/code] so the keys/crl.pem will be filled after this i copy the crl.pem to /etc/openvpn/crl.pem but then if i do this all again to revoke a second certificate, the contents of the crl.pem will be overwritten. so what is the way to revoke more than one client certificate? greets Tom

revoke more than one client certificate

tom55

Hello,

i have a problem using crl.pem to revoke more than one clients.

i followed this guide to revoke a first certificate : http://blog.remibergsma.com/2013/02/27/improving-openvpn-security-by-revoking-unneeded-certificates/

cd /usr/share/easy-rsa/2.0/

crl-verify crl.pem >> server.conf

source ./vars
/revoke-full client

then i run the command:

openssl crl -in keys/crl.pem -text

so the keys/crl.pem will be filled
after this i copy the crl.pem to /etc/openvpn/crl.pem

but then if i do this all again to revoke a second certificate, the contents of the crl.pem will be overwritten.

so what is the way to revoke more than one client certificate?

greets Tom