From 09e1cf8fd953c014f88ef9dd557c9ed0a5636bd7 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Tue, 2 May 2017 17:48:29 +0200
Subject: [PATCH] Change location of crl.pem.

---
 install_openvpn.txt | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/install_openvpn.txt b/install_openvpn.txt
index abd45f6..ce87e06 100644
--- a/install_openvpn.txt
+++ b/install_openvpn.txt
@@ -182,7 +182,9 @@ openvpn --genkey --secret $OPENVPN_BASE_DIR/keys/ta.key
 
 ## - Create empty CRL (Certificate Revokation List)
 ## -
-openssl ca -gencrl -out /etc/openvpn/keys/crl.pem -config $KEY_CONFIG
+#openssl ca -gencrl -out /etc/openvpn/keys/crl.pem -config $KEY_CONFIG
+openssl ca -gencrl -out /etc/openvpn/crl.pem -config $KEY_CONFIG
+ln -s ../crl.pem /etc/openvpn/keys/crl.pem
 
 cd $OPENVPN_BASE_DIR
 ln -s keys/crl.pem
@@ -538,7 +540,8 @@ verb 4
 # category will be output to the log.
 ;mute 20
 
-crl-verify /etc/openvpn/keys/crl.pem
+#crl-verify /etc/openvpn/keys/crl.pem
+crl-verify /etc/openvpn/crl.pem
 
 EOF
 
@@ -865,7 +868,8 @@ verb 4
 # category will be output to the log.
 ;mute 20
 
-crl-verify /etc/openvpn/keys/crl.pem
+#crl-verify /etc/openvpn/keys/crl.pem
+crl-verify /etc/openvpn/crl.pem
 EOF