When revoking users, the script warns to re-generate the crl.pem, but this is already done in the background.

[frijsdijk]

Perhaps it's just me but when I revoked a user, I got this message from the script:

Notice
------
                              * IMPORTANT *

Revocation was successful. You must run 'gen-crl' and upload a new CRL to your
infrastructure in order to prevent the revoked certificate from being accepted.

* Using SSL: openssl OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

* Using Easy-RSA configuration: /etc/openvpn/easy-rsa/vars

* The preferred location for 'vars' is within the PKI folder.
  To silence this message move your 'vars' file to your PKI
  or declare your 'vars' file with option: --vars=<FILE>
Using configuration from /etc/openvpn/easy-rsa/pki/c7d3ed7d/temp.64035051

Notice
------
An updated CRL has been created.
CRL file: /etc/openvpn/easy-rsa/pki/crl.pem

.. so I interpreted this as if I had to do this manually. But it's done by the script already, and the script also copies this file to /etc/openvpn/crl.pem and it's immediately active.

Love the script btw, works really well and takes away a lot of the hassle of setting up OpenVPN.