Openvpn "CRL has expired" problem with crl.pem

[Guest]

[Lotoss]

Hello all!
I have efw 3.2.5 with openvpn fully worked without problems before i revoked some certificates(users) for security reasons. And now nobody can connect to vpn.
Error is "error=CRL has expired". After i googled it and found some solutions and one of them is to generate new crl.pem file via openssl. But in endian i cant do it and need help.
I found:
/var/efw/vpn - with ca certificates directory
/var/efw/openvpn - with settings for openvpn (why not in vpn directory ?)
/etc/openvpn - with openssl.cnf but not for endian settings....

Please help with generating clr.pem or finding best solution for this error....

[reetp]

You should not need to do this manually.. You'll get in a bit of a mess. Endian isn't really deigned for doing things manually.

From the GUI

VPN/Cetificates/Certificate Revocation List

The CRL will update each time you Revoke a certificate and is available for download.

Or you can obtain the CRL cert directly here (after revoking the certs)

/var/efw/vpn/ca/crl.pem

[Lotoss]

You should not need to do this manually.. You'll get in a bit of a mess. Endian isn't really deigned for doing things manually.

From the GUI

VPN/Cetificates/Certificate Revocation List

The CRL will update each time you Revoke a certificate and is available for download.

Or you can obtain the CRL cert directly here (after revoking the certs)

/var/efw/vpn/ca/crl.pem

Thanks, i revoked another one certificate and vpn working now. What a...