Fabio/openvpn-install
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revoke clients only when $CLIENTNUMBER is set

Browse source 
Fix #477
This commit is contained in:
randomshell 2020-03-29 07:06:49 +00:00 committed by GitHub
parent 44105eb060
commit 2384dc1eaf
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
openvpn-install.sh
View file

@ -1107,23 +1107,25 @@ function revokeClient () {
read -rp "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER read -rp "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER
fi fi
CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p) if [[ "$CLIENTNUMBER" != "" ]]; then
cd /etc/openvpn/easy-rsa/ || return CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p)
./easyrsa --batch revoke "$CLIENT" cd /etc/openvpn/easy-rsa/ || return
EASYRSA_CRL_DAYS=3650 ./easyrsa gen-crl ./easyrsa --batch revoke "$CLIENT"
# Cleanup EASYRSA_CRL_DAYS=3650 ./easyrsa gen-crl
rm -f "pki/reqs/$CLIENT.req" # Cleanup
rm -f "pki/private/$CLIENT.key" rm -f "pki/reqs/$CLIENT.req"
rm -f "pki/issued/$CLIENT.crt" rm -f "pki/private/$CLIENT.key"
rm -f /etc/openvpn/crl.pem rm -f "pki/issued/$CLIENT.crt"
cp /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn/crl.pem rm -f /etc/openvpn/crl.pem
chmod 644 /etc/openvpn/crl.pem cp /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn/crl.pem
find /home/ -maxdepth 2 -name "$CLIENT.ovpn" -delete chmod 644 /etc/openvpn/crl.pem
rm -f "/root/$CLIENT.ovpn" find /home/ -maxdepth 2 -name "$CLIENT.ovpn" -delete
sed -i "s|^$CLIENT,.*||" /etc/openvpn/ipp.txt rm -f "/root/$CLIENT.ovpn"
sed -i "s|^$CLIENT,.*||" /etc/openvpn/ipp.txt
echo "" echo ""
echo "Certificate for client $CLIENT revoked." echo "Certificate for client $CLIENT revoked."
fi
} }
function removeUnbound () { function removeUnbound () {