OpenVPN 2.3.2
EasyRSA v3
Ubuntu 14.04
I used the following commands to create a client keypair
./easyrsa build-client-full user nopass
I wanted to test removing the user so I ran:
./easyrsa revoke user
./easyrsa gen-crl user
sudo service openvpn restart
I checked the pki/index.txt file and it shows the user with 'R' status.
I can still VPN in with this client.conf!!!
server.conf
mode server
tls-server
port 1194
proto udp
dev tun
ca easy-rsa/easyrsa3/pki/ca.crt
cert easy-rsa/easyrsa3/pki/issued/server.crt
dh easy-rsa/easyrsa3/pki/dh.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.255.0"
push "route 10.0.1.0 255.255.255.0"
push "route 10.0.2.0 255.255.255.0"
push "route 10.0.3.0 255.255.255.0"
push "dhcp-option DNS 10.0.0.2"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
client.conf
client
tls-client
dev tun
proto udp
remote server 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /home/user/ca.crt
cert /home/user/user.crt
key /home/user/user.key
remote-cert-tls server
tls-auth /home/user/ta.key 1
comp-lzo
verb 3
