I thought this “feature” was solved some versions ago?
Long time ago (version 2.1.4) I was caught off-guard by it, and had to solve it 
in a different way.


From: "Stefan Monnier" 
<monn...@iro.umontreal.ca<mailto:monn...@iro.umontreal.ca>>
Date: Monday, 18 January 2021 at 21:32:33
To: "openvpn-users@lists.sourceforge.net" 
<openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>>
Subject: Re: [Openvpn-users] Concatenate CRL's?

> If I have multiple CA's, will openvpn understand a --crl-verify
> "file", where the file contains the CRL's from all of the CA's
> concatenated together?  Or will it accept multiple --crl-verify
> entries?

I have pretty much the same question.

I have tried to `cat ca1.crt ca2.crt >ca.crt` but it seems only th first
is used.  I need to transition from the first CA to the second but
I don't know how to do it without having a "flag day" which requires
updating all the clients at the same time (and it gets worse with some
clients to which I only have access via the VPN ;-)


        Stefan



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet 
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u 
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat 
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband 
houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are 
not the addressee or if this message was sent to you by mistake, you are 
requested to inform the sender and delete the message. The State accepts no 
liability for damage of any kind resulting from the risks inherent in the 
electronic transmission of messages.
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to