From c0adc8c75ba3a49b7ce44054e59d704097b8dd49 Mon Sep 17 00:00:00 2001
From: Nyr <me@nyr.be>
Date: Tue, 14 May 2013 17:41:53 +0200
Subject: [PATCH] Added option for client certificate revocation

---
 openvpn-install.sh | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index 5c5fa4e..bbf1711 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -43,10 +43,11 @@ if [ -e /etc/openvpn/server.conf ]; then
 		echo "What do you want to do?"
 		echo ""
 		echo "1) Add a cert for a new user"
-		echo "2) Remove OpenVPN"
-		echo "3) Exit"
+		echo "2) Revoke existing user cert"
+		echo "3) Remove OpenVPN"
+		echo "4) Exit"
 		echo ""
-		read -p "Select an option [1-3]:" option
+		read -p "Select an option [1-4]:" option
 		case $option in
 			1) 
 			echo ""
@@ -75,7 +76,17 @@ if [ -e /etc/openvpn/server.conf ]; then
 			echo "Client $CLIENT added, certs available at ~/ovpn-$CLIENT.tar.gz"
 			exit
 			;;
-			2) 
+			2)
+			echo ""
+			echo "Tell me the existing client name"
+			read -p "Client name: " -e -i client CLIENT
+			. /etc/openvpn/easy-rsa/2.0/vars
+			. /etc/openvpn/easy-rsa/2.0/revoke-full $CLIENT
+			echo ""
+			echo "Certificate for client $CLIENT revoked"
+			exit
+			;;
+			3) 
 			apt-get remove --purge -y openvpn openvpn-blacklist
 			rm -r /etc/openvpn
 			rm -r /usr/share/doc/openvpn
@@ -85,7 +96,7 @@ if [ -e /etc/openvpn/server.conf ]; then
 			echo "OpenVPN removed!"
 			exit
 			;;
-			3) exit;;
+			4) exit;;
 		esac
 	done
 else