#!/bin/bash

echo -n "Full path to your client certificate which needs to be revoked: "
read CLCERT
echo -n "Full path to your root certificate: "
read CACERT
echo -n "Full path to your root certificate private key file: "
read CAKEY
echo -n "Full path to your CR list: " 
read CRL

openssl ca -keyfile $CAKEY -cert $CACERT -revoke $CLCERT
openssl ca -gencrl -keyfile $CAKEY -cert $CACERT -out $CRL

echo "You need to restart apache."