-
Notifications
You must be signed in to change notification settings - Fork 1.2k
EasyRSA Renewal
TinCanTech edited this page Sep 9, 2022
·
13 revisions
Because a certificate expired but nothing else changed.
-
Upgrade to EasyRSA Version 3.1.1
-
Use
renew <commonName>
This will leave two certificate for
<commonName>
. -
Use
revoke-renewed <commonName> [reason]
- If an earlier version of
easyrsa
has been used torenew
a certificate:
-
Use
rewind-renew <serialNumber>
This will save the files stored by
serialNumber
back to files named by<commonName>
. -
Use
revoke-renewed <commonName> [reason]
This will revoke the old certificate, which has been replaced by a new certificate.
- Use
revoke-renewed <commonName> [reason]
See easyrsa help gen-crl