mirror/easy-rsa
1
0
Fork 0
mirror of https://github.com/OpenVPN/easy-rsa.git synced 2025-03-14 10:21:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: EasyRSA Renewal
Pages
Development Roadmap EasyRSA Renewal Getting help for Easy RSA Home
Clone
13
EasyRSA Renewal
TinCanTech edited this page 2024-11-11 18:19:18 +00:00
Table of Contents

More detailed information: EasyRSA-Renew-and-Revoke.md

> renew Why ?

Because a certificate expired but nothing else changed.

> renew How ?

  1. Upgrade to EasyRSA Version 3.1.1

  2. Use renew <commonName>

    This will leave two certificate for <commonName>.

  3. Use revoke-renewed <commonName> [reason]

    This will leave one renewed certificate for <commonName>.

> revoke-renewed cannot find certificates for <commonName> ?

  • If an earlier version of easyrsa has been used to renew a certificate:

  1. Use rewind-renew <serialNumber>

    This will save the files stored by serialNumber back to files named by <commonName>.

  2. Use revoke-renewed <commonName> [reason]

    This will revoke the old certificate, which has been replaced by a new certificate.

> renew found an old certificate for <commonName> ?

  1. Use revoke-renewed <commonName> [reason]

> Update CRL

See easyrsa help gen-crl