A further related question: Is there some way to remove a suspended certificate from a CRL without manually editing the index file? Using the "- crl_reason removeFromCRL" option on the ca command does not work.
cheers Mat On Friday 02. May 2014 14:35:23 you wrote: > Hy! > > If I have suspended (crlReason=certificateHold) a certificate in the past an > now want to really revoke it using "openssl ca", I get an error message > "ERROR:Already revoked, serial number 01". Is there some way to make > openssl automaticalls "upgrade" the suspension to a revocation with having > to remove the hold from the index file first? > > cheers > Mat
signature.asc
Description: This is a digitally signed message part.