A further related question: Is there some way to remove a suspended 
certificate from a CRL without manually editing the index file? Using the "-
crl_reason  removeFromCRL" option on the ca command does not work.

cheers
Mat

On Friday 02. May 2014 14:35:23 you wrote:
> Hy!
> 
> If I have suspended (crlReason=certificateHold) a certificate in the past an
> now want to really revoke it using "openssl ca", I get an error message
> "ERROR:Already revoked, serial number 01". Is there some way to make
> openssl automaticalls "upgrade" the suspension to a revocation with having
> to remove the hold from the index file first?
> 
> cheers
> Mat

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to