revoked cert still works

Started by bdario, November 02, 2023, 01:34:48 PM

Previous topic - Next topic
Hello folks,
I'm stuck on certificate revocation.

I always used username and cert to create VPN clients:
1) create user / password
2) create user-cert
3) bind user and user-cert
4) OpenVPN client export

I revoked a cert:
1) create CA Revocation List
2) revoke the cert

but the user still connetcs using VPN

This is embarazing.
Can someone please help me to solve this issue?

Greetings
Dario

Did you configure the CRL in the OpenVPN server/instance settings?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Hi Patrick,
I only create the CRL under:
System / Trust / Revocation
(and I revoked the cert, the cert associated to the user is marked as "Revoke")

I toke a look under OpenVPN Server but I don't found the way to configure the CRL

Can you please show me the way / give me instructions?

Thanks a lot
Dario

See screen shot, please.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Great job Patrick, now it works fine
have you a nice day
thanks a lot
Dario