#!/bin/bash
#
# YACHT (Yet Another CA How To) Placed in public domain. RLamb 2019
#
wdest="root@mywebserver:/siteroot"
if [ $# -lt 1 ]; then
    echo "Usage $0 serial-no-to-revoke"
    exit 0
fi
export SAN=""
openssl ca -config ca2.cnf -revoke newcerts/$1.pem -keyfile ca.key -cert ca.crt
echo scp -p index.txt $wdest/docs/ca/www/ocsp/