Revoking Certificates - certs not created on OpenVPN Server?

AndyInNYC

I have an openwrt router running OpenVPN (it works fine).

I generated and store all my certificates on a Ubuntu server which is behind the router. I really don't want the router's space storing the certs nor it's slower processor creating them.

However, I'd like to be able to revoke certificates.

How can I do this?

Do I need to install easy-rsa on the router and regen all my certificates and start fresh?

Andrew

TinCanTech

AndyInNYC wrote I generated and store all my certificates on a Ubuntu server

Install easyrsa3 on that computer.

AndyInNYC wrote I'd like to be able to revoke certificates

Then revoke certificates with easyrsa3 on the computer above.

AndyInNYC wrote I have an openwrt router running OpenVPN

Copy the CRL file to this device.

Ensure your openvpn configuration has a CRL defined.

AndyInNYC wrote Do I need to install easy-rsa on the router and regen all my certificates and start fresh?

No.