Certificate Revocation List via OpenSSL

Create a CRL

echo -ne '00' > crlnumber

openssl ca -gencrl -out crl.pem

Revoke a Certificate

openssl ca -revoke newcerts/username.pem

openssl ca -gencrl -out crl.pem