Skip to content

Instantly share code, notes, and snippets.

@antoniocampos

antoniocampos/SolveCRLExpired.sh

Last active October 4, 2022 17:59
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save antoniocampos/86e789c8e5844f6b7a1f187024767e6e to your computer and use it in GitHub Desktop.
Save antoniocampos/86e789c8e5844f6b7a1f187024767e6e to your computer and use it in GitHub Desktop.
Download ZIP
Solve OpenVPN 2.4 Error = CRL has expired
Raw
SolveCRLExpired.sh
#OpenVPN 2.4 no longer accepts CRLs who's nextUpdate field lies in the past.
#
# me@antoniocampos.net 2017
# no need for any change at the client side
# you may want to increase the CRL EXPIRE period
# just increase the value default_crl_days = ?? in the openssl.cnf
# tested with Debian 9 and OpenVPN 2.4
cd /etc/openvpn/2.0/
export KEY_CN="My VPN Server"
export KEY_OU="IT Dep"
source ./vars
openssl ca -gencrl -keyfile keys/ca.key -cert keys/ca.crt -out keys/crl.pem -config ./openssl.cnf
Raw
SolveCRLExpiredEasyRSA.sh
# me@antoniocampos.net 2020
# If you use easyrsa, you just have to run
easyrsa gen-crl
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment