Description
Describe the issue
1-
After using the script to revoke a client. He still able to use the OpenVpn server if he didn't disconnect from the server.
In server.conf I confirm that: crl-verify crl.pem
is available
referring to this question on OpenVpn Forum:
https://forums.openvpn.net/viewtopic.php?t=25160
2-
Moreover, I noticed that when I revoked a client let say client1
and after that you tried to add a new client using the script with the same name i.e. client1
, the script will show this message:
The specified client CN was already found in easy-rsa, please choose another name.
So what should I do to guarantee that when the user revoked from the server he will be disconnected immediately from OpenVpn?
How can I delete any reference to client1 from easy-rsa, so I can add a new client with the same name of a revoked client?
- OS: Ubuntu 18.04
- Device: Macbook
- Client: Tunnelblick