doc: Fix revocation.sh examples & clarify usage

Clarify that revocation.sh must be run from federation/ directory.
pull/73/head
Matthew Vivian 2024-11-25 14:18:09 +00:00 committed by Guus der Kinderen
parent b414916115
commit 478caa939b
1 changed files with 9 additions and 6 deletions

View File

@ -186,12 +186,15 @@ openssl ocsp -url http://localhost:8888 \
### Certificate Revocation
The `revocation.sh` script allows you to revoke SSL certificates and
The `./scripts/revocation.sh` script allows you to revoke SSL certificates and
update the OCSP responder's database. You can also un-revoke certificates
that were previously revoked.
that were previously revoked.
**Important:** Run this script from the root `federation/` directory, as it requires
direct access to the `_data` directory containing the certificates and PKI infrastructure.
```bash
./revocation.sh --server xmpp1 [--reason reason] [--unrevoke]
./scripts/revocation.sh --server xmpp1 [--reason reason] [--unrevoke]
```
Available revocation reasons:
@ -206,13 +209,13 @@ Available revocation reasons:
Examples:
```bash
# Revoke xmpp1's certificate
./revocation.sh --server xmpp1
./scripts/revocation.sh --server xmpp1
# Revoke with specific reason
./revocation.sh --server xmpp1 --reason keyCompromise
./scripts/revocation.sh --server xmpp1 --reason keyCompromise
# Remove revocation status
./revocation.sh --server xmpp1 --unrevoke
./scripts/revocation.sh --server xmpp1 --unrevoke
```
To verify the current status: