Re: [Openvpn-users] Revoking access...

[Mathias Sundman <mathias@xxxxxxxxxx>]

On Fri, 4 Feb 2005, Javier Sanchez wrote:

> El vie, 04-02-2005 a las 03:33 -0500, Francois Meehan escribió:
> > With version 2 in multi-clients server mode, how do you revoke access to
> > users that we have created certificates for?
>
> have you generated a crl for your cert authority ? If so, you should
> revoke the user certificate using "openssl revoke usercert.pem".
>
> If you dont have a crl yet, create it with "openssl ca -gencrl -out
> crl.pem, then you must add the following line to your server config.
>
> crl-verify $PATH/crl.pem

Also remember that if you revoke a client that is already connected, he 
will not be disconnected automatically. He will only be denied access next 
time he attempts to connect.

To disconnect him immediatly you need to have the management interface 
enabled (--management) and use the kill command, or restart the openvpn 
server.

--
_____________________________________________________________
Mathias Sundman                  (^)   ASCII Ribbon Campaign
OpenVPN GUI for Windows           X    NO HTML/RTF in e-mail
http://www.nilings.se/openvpn    / \   NO Word docs in e-mail