yukih Hi, I have an OpenVPN server installed and running on FreeBSD. FreeBSD version : 12.1 OpenVPN version : 2.4.8 The revoke process creates crl.pem, but copy this file to a location where openvpn can access it. Then, it is natural that the client PC that is the target of revoke cannot newly connect to the OpenVPN server. However, the client PC that is not the target of revoke cannot connect to the OpenVPN server newly. There was a message "CRL: cannot read: crl.pem" in the log. At this time, if the OpenVPN daemon is restarted, client PCs that are not the target of revoke can newly connect to the OpenVPN server. Is this as expected?
TinCanTech yukih wrote There was a message "CRL: cannot read: crl.pem" in the log Then you should find out why the file cannot be read .. https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963
yukih It did not have read permission on the crl.pem file. Granting read permission solved the problem.
