#!/bin/bash
#
# YACHT (Yet Another CA How To) Placed in public domain. RLamb 2019
#
wdest="root@mywebserver:/siteroot"
export SAN=""
openssl ca -config ca2.cnf -gencrl -keyfile ca.key -cert ca.crt -crldays 7 -out crl.pem
openssl crl -in crl.pem -outform der -out ca.crl
echo scp -p ca.crl $wdest/docs/ca/smime/ca.crl