OpenVPN Support Forum

I am trying to revoke user certificate using Windows version of OpenVPN.

I run the 'revoke-full' command which produces the result below, which I believe is successful;


WARNING: can't open config file: /etc/ssl/openssl.cnf

Using configuration from openssl-1.0.0.cnf

ERROR:Already revoked, serial number 0C

WARNING: can't open config file: /etc/ssl/openssl.cnf

Using configuration from openssl-1.0.0.cnf

keys\ca.crt

keys\crl.pem

1 file(s) copied.

WARNING: can't open config file: /etc/ssl/openssl.cnf

error 23 at 0 depth lookup:certificate revoked


I then try to run the 'crl-verify crl.pem' command which produces the error below;


'crl-verify' is not recognized as an internal or external command,

operable program or batch file.


Not sure where to go from here

Thanks for your response, the documents says;

4. copy crl.pem to server directory and ensure config file uses "crl-verify <crl filename>"

But what server directory and config file is it referring to, are these instructions for Windows OpenVPN?