I can't connect to my Easy-RSA VPN server. I can connect using SSH; in the logfiles I read "error=CRL has expired". So, according to instructions found using Google I should run
./easyrsa gen-crl
Which gives the error:
Easy-RSA error:
Missing expected CA file: ca.crt (perhaps you need to run build-ca?)
Run easyrsa without commands for usage and command help.
The ca.crt file is located in /etc/openvpn/ca.crt. Where should I put it so I can run the gen-crl command succesfully.
/etc/openvpn/easy-rsa/{1.0,2.0,3.0,...}/keys/ca.crt
. But this information should all be stored in your easy-rsa config files. – Lenniey Jan 14 '19 at 10:41