Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-31 Thread Hans via Openvpn-users
..@binect.de>> Subject: Re: [Openvpn-users] Revoke a certificate and reuse it On 25.08.23 21:41, Jason Long via Openvpn-users wrote: > Hello,With the help of the following command, you can revoke a certificate: > # ./revoke-full "Client_Name" > Now if you change your mind, is

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-30 Thread David Sommerseth
On 26/08/2023 08:58, Bo Berglund wrote: I tried to use revocation on our company VPN when a few employees left and it seemed to work fine until a week later when it did not work anymore! At that point the VPN stopped working for*everyone*, noone was allowed in at all!!! What is important to be

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-27 Thread Jochen Bern
On 27.08.23 20:43, Jason Long wrote: On Sun, Aug 27, 2023 at 1:33 PM, Jochen Bern that seems correct, but as I said, I don't use EasyRSA myself. Hello,Thanks again.Can you show me the OpenSSL commands that you use to generate the server and client certificates? I'm not using bare OpenSSL for

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-27 Thread Jason Long via Openvpn-users
On Sun, Aug 27, 2023 at 1:33 PM, Jochen Bern wrote: On 27.08.23 07:49, Jason Long wrote: > 1- When a key is generated, how many days is the default time for it to > expire? >Whatever your configuration files say. And >frankly, just generating one >and *looking* at it might tell you *even fas

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-27 Thread Jochen Bern
On 27.08.23 07:49, Jason Long wrote: 1- When a key is generated, how many days is the default time for it to expire? Whatever your configuration files say. And frankly, just generating one and *looking* at it might tell you *even faster* than reading the configs. (IIRC EasyRSA comes with its

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-26 Thread Jason Long via Openvpn-users
>On 26.08.23 07:32, Jason Long wrote: > 1- How do you give keys to a large number of clients? Suppose there are >    1000 employees in a company, do all employees have to go to the IT >    department of that company to get the client keys? >Certificates are technical proof that the CA trusts the h

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-26 Thread Jochen Bern
On 26.08.23 07:32, Jason Long wrote: 1- How do you give keys to a large number of clients? Suppose there are 1000 employees in a company, do all employees have to go to the IT department of that company to get the client keys? Certificates are technical proof that the CA trusts the holder

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-26 Thread Jason Long via Openvpn-users
On Sat, 26 Aug 2023 05:32:56 + (UTC), Jason Long via Openvpn-users wrote: >On 25.08.23 21:41, Jason Long via Openvpn-users wrote: >> Hello,With the help of the following command, you can revoke a certificate: >> # ./revoke-full "Client_Name" >> Now if you change your mind, is it possible to u

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-26 Thread Bo Berglund
On Sat, 26 Aug 2023 05:32:56 + (UTC), Jason Long via Openvpn-users wrote: >On 25.08.23 21:41, Jason Long via Openvpn-users wrote: >> Hello,With the help of the following command, you can revoke a certificate: >> # ./revoke-full "Client_Name" >> Now if you change your mind, is it possible to u

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-25 Thread Jason Long via Openvpn-users
On 25.08.23 21:41, Jason Long via Openvpn-users wrote: > Hello,With the help of the following command, you can revoke a certificate: > # ./revoke-full "Client_Name" > Now if you change your mind, is it possible to use that certificate again? > Is there a command to validate a revoked certificate?

Re: [Openvpn-users] Revoke a certificate and reuse it

2023-08-25 Thread Jochen Bern
On 25.08.23 21:41, Jason Long via Openvpn-users wrote: Hello,With the help of the following command, you can revoke a certificate: # ./revoke-full "Client_Name" Now if you change your mind, is it possible to use that certificate again? Is there a command to validate a revoked certificate? Seman

[Openvpn-users] Revoke a certificate and reuse it

2023-08-25 Thread Jason Long via Openvpn-users
Hello,With the help of the following command, you can revoke a certificate: # ./revoke-full "Client_Name" Now if you change your mind, is it possible to use that certificate again? Is there a command to validate a revoked certificate? Thank you.___ Op