diff --git a/openvpn-install.sh b/openvpn-install.sh index 3de597b..61af85e 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -490,6 +490,9 @@ else ./easyrsa --batch revoke "$client" ./easyrsa --batch --days=3650 gen-crl rm -f /etc/openvpn/server/crl.pem + rm -f /etc/openvpn/server/easy-rsa/pki/reqs/"$client".req + rm -f /etc/openvpn/server/easy-rsa/pki/private/"$client".key + rm -f /etc/openvpn/server/easy-rsa/pki/issued/"$client".crt cp /etc/openvpn/server/easy-rsa/pki/crl.pem /etc/openvpn/server/crl.pem # CRL is read with each client connection, when OpenVPN is dropped to nobody chown nobody:"$group_name" /etc/openvpn/server/crl.pem