# File lib/puppet/sslcertificates/ca.rb, line 188
188:   def revoke(serial, reason = OpenSSL::OCSP::REVOKED_STATUS_KEYCOMPROMISE)
189:     time = Time.now
190:     revoked = OpenSSL::X509::Revoked.new
191:     revoked.serial = serial
192:     revoked.time = time
193:     enum = OpenSSL::ASN1::Enumerated(reason)
194:     ext = OpenSSL::X509::Extension.new("CRLReason", enum)
195:     revoked.add_extension(ext)
196:     @crl.add_revoked(revoked)
197:     store_crl
198:   end