解决openvpn的CRL has expired笔记

我的openvpn 部署在内蒙古的openwrt上今天突然无法连接了

Loading image...

Please wait a moment

Retry 0

🔍 View ⬇ Download 🔗 Open

PNG

🖼️

Failed to Load Image

Unable to load the image. Please check your connection.

🔄 Retry ⬇ Download Instead 🔗 Open Direct

根据log发现是CRL证书过期了。

 1  
 2root@BleachWrt:/etc/openvpn# cd /etc/easy-rsa/  
 3root@BleachWrt:/etc/easy-rsa# ls  
 4easyrsa openssl-1.0.0.cnf openssl-easyrsa.cnf ta.key x509-types  
 5keys openssl-1.0.cnf pki vars  
 6root@BleachWrt:/etc/easy-rsa# pwd  
 7/etc/easy-rsa  
 8  
 9root@BleachWrt:/etc/easy-rsa# EASYRSA_CRL_DAYS=3650 ./easyrsa gen-crl  
10  
11  

Loading image...

Please wait a moment

Retry 0

🔍 View ⬇ Download 🔗 Open

PNG

🖼️

Failed to Load Image

Unable to load the image. Please check your connection.

🔄 Retry ⬇ Download Instead 🔗 Open Direct