#!/bin/sh -x
CA=./ca
openssl ca -config ${CA}/openssl.cnf -gencrl \
   -keyfile ${CA}/private/cakey.pem -cert ${CA}/cacert.pem \
   -out ${CA}/crl/cacrl.pem
