openvpn crl stuff

Get your crl.pem expir date:

openssl crl -text -noout -in crl.pem

Renew your crl.pem:

./easyrsa gen-crl

It seems there is no –days argument, crl.pem’s are valid for 180 days

You can change that value by tuning the easyrsa script: search for CRL_DAYS