diff --git a/ssl/client-certs/README.md b/ssl/client-certs/README.md index 10ab5fd3..6130ee3a 100644 --- a/ssl/client-certs/README.md +++ b/ssl/client-certs/README.md @@ -28,3 +28,7 @@ openssl verify -verbose -CAfile /tmp/test.pem -crl_check ssl/client-certs/atat.m > atat.mil.crt: OK ``` +To regenerate the crl: + +`openssl ca -gencrl -keyfile client-ca.key -cert client-ca.crt -out .crl -config crl_openssl.conf` +`openssl crl -inform der -in client-ca.der.crl -noout -text`