How to add a certificate revocation list to Mikrotik's OpenVPN server?

A

Alghazanth2015-10-02 03:52:07

openvpn

Alghazanth, 2015-10-02 03:52:07

Recent versions of RouterOS have added support for certificate revocation lists (crl). The documentation says that this list should be updated via http, but how to set it up is not clear. Has anyone already implemented something like this?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

C

Cool Admin, 2015-10-10
@Alghazanth

How about here is the answer. Nothing needs to be configured.
"Starting from v6rc10, CRL will be automatically renewed every hour for certificates which have "trusted=yes" using http protocol (ldap and ftp is currently unsupported). Segmented CRL is also currently unsupported"
wiki.mikrotik.com/wiki/Manual: System/Certificates