Revoke certificate Windows

Vizik

Hello. I apologize, perhaps this topic has been raised more than once.

I am using OpenVPN. There is a server to which employees are connected through OpenVPN. One of the employees quits and I need to disable his OpenVPN account - remove the certificate. How to do it? I did revoke, substituted the crl.pem file in the configuration folder, added crl-verify crl.pem to the configuration file. Did everything according to the instructions. But still the user can establish a connection. What is the procedure for revoking a certificate for Windows? Help me please

TinCanTech

You must have done it incorrectly.

Vizik

TinCanTech wrote You must have done it incorrectly.

Tell me how to do it right? Thank you

TinCanTech

Read the documentation.. That is why it is there.

I don't know what you have done wrong. Unless you believe openvpn has bug ..

openvpn_inc

Hi Viz,

The basic procedure you used sounds right, assuming you meant that the server is checking the CRL. But a quick and easy server-side means of access control can be done with a --client-config-directory and --ccd-exclusive.

In that case you would need to have a file in the CCD for each allowed client. It can be an empty file, and the name must be the client certificate's common name. As always please see the manual for reference.

regards, rob0

Vizik

Everything is fine. I reinstalled OpenVPN on the server side and revoke worked. Thank you