I used the
easy-rsa/2.0 programs to build server and client certificates for OpenVPN. I copied the client ones to the clients along with
ca.crt. All good.
I now need to revoke a client certificate from a stolen laptop. In
/usr/share/doc/openvpn/examples/easy-rsa/2.0 there's a revoke script. I've run this successfully and it says "Data Base Updated". It's created some files in a subdir of the examples/doc folder.
I've copied the created
/etc/openvpn/crl.pem and I've added
Is there any way I can verify that I've done the right thing and that it will indeed block access?
Also, I'm not clear where this "Data Base" is stored or what it refers to? Is there any way to inspect this database?