You must apply the changes in order for them to take effect.");?>
WARNING: This feature is experimental and modifies your optional interface configuration.
Backup your configuration before using OpenVPN, and restore it before upgrading.
Note:
A CRL (certificate revocation list) is used when a particular
key is compromised but when the overall PKI is still intact.
Suppose you had a PKI consisting of a CA, root certificate, and
a number of client certificates. Suppose a laptop computer
containing a client key and certificate was stolen. By adding the
stolen certificate to the CRL file, you could reject any connection
which attempts to use it, while preserving the overall
integrity of the PKI.
The only time when it would be necessary to rebuild the entire
PKI from scratch would be if the root certificate key itself was
compromised.