On Thu, 16 Apr 2020 12:30:48 +0200
Dajka Tamás <vi...@vipernet.hu> wrote:

> why not simply using a CRL file and revoke the unneeded certificate?

Because it's a nice and simple option ;-)

> To debug the issue, I think we'll need some logs with 'verb 4' - at
> least from the server side.

Even with "verb 9" there is NO log line containing the word "crl".
That's quite weird isn't it? I can see all options of the conf file pass
by when restarting this instance (I cannot restart the complete server
as it's a production server)

Bug? Oh, and BTW, I tried the crl file, just to try, but got: "CRL:
cannot read CRL from file". The dir is 755 and the file crl.pem is 644.
I run openvpn as nobody/nogroup.

R.

-- 
richard lucassen
http://contact.xaq.nl/


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to