# HG changeset patch
# User Tomas Zeman <tzeman@volny.cz>
# Date 1366206928 -7200
# Node ID f61233ece2533183d7ddfed8c0e7a94ad6f59259
# Parent  14d669d74b48e9de5bfcf5d9557bf7dc85d563a5
openvpn: tls-verify

diff -r 14d669d74b48 -r f61233ece253 freebsd/openvpn
--- a/freebsd/openvpn	Mon Jan 21 10:19:44 2013 +0100
+++ b/freebsd/openvpn	Wed Apr 17 15:55:28 2013 +0200
@@ -15,3 +15,15 @@
 access to the network attached to the server. Each client can also contact any
 other client, subject to firewall rules. 
 
+Revoke/Unrevoke a client certificate in OpenVPN
+http://blog.abhijeetr.com/2012/06/revokeunrevoke-client-certificate-in.html
+
+cname is the one which you want to disable:
+./revoke-all cname
+
+edit the server.conf & add the following line:
+crl-verify crl.pem
+
+ovpnCNcheck — an OpenVPN tls-verify script
+http://robert.penz.name/21/ovpncncheck-an-openvpn-tls-verify-script/
+http://robert.penz.name/wp-content/uploads/2008/01/ovpncncheck.sh