Patch/openvpn-install
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge 332ffb03c5 into c0f0d47a64

Browse Source
This commit is contained in:
Tercio Gaudencio Filho 2017-06-05 15:57:01 +00:00 committed by GitHub
commit b677f2d70f
1 changed files with 19 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
openvpn-install.sh
View File

@ -110,19 +110,25 @@ if [[ -e /etc/openvpn/server.conf ]]; then
else else
read -p "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER read -p "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER
fi fi
CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p) if [[ "$CLIENTNUMBER" =~ ^[0-9]+$ ]] && [[ "$CLIENTNUMBER" -ge 1 ]] && [[ "$CLIENTNUMBER" -le $NUMBEROFCLIENTS ]]; then
cd /etc/openvpn/easy-rsa/ CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p)
./easyrsa --batch revoke $CLIENT cd /etc/openvpn/easy-rsa/
./easyrsa gen-crl ./easyrsa --batch revoke $CLIENT
rm -rf pki/reqs/$CLIENT.req ./easyrsa gen-crl
rm -rf pki/private/$CLIENT.key rm -rf pki/reqs/$CLIENT.req
rm -rf pki/issued/$CLIENT.crt rm -rf pki/private/$CLIENT.key
rm -rf /etc/openvpn/crl.pem rm -rf pki/issued/$CLIENT.crt
cp /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn/crl.pem rm -rf /etc/openvpn/crl.pem
# CRL is read with each client connection, when OpenVPN is dropped to nobody cp /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn/crl.pem
chown nobody:$GROUPNAME /etc/openvpn/crl.pem # CRL is read with each client connection, when OpenVPN is dropped to nobody
echo "" chown nobody:$GROUPNAME /etc/openvpn/crl.pem
echo "Certificate for client $CLIENT revoked" echo ""
echo "Certificate for client $CLIENT revoked"
else
echo ""
echo "You selected an invalid client!"
exit 7
fi
exit exit
;; ;;
3) 3)