revoking duplicate CN

[deleted]

Hi,

I'm taking over another person's position and and I am trying to revoke a certificate (duplicate certificates - the previous person created a new certificated without first revoking the previous one), but I just get the following error:

ERROR:Already revoked, serial number 2E

However, when I look in index.txt, this particular user is still listed several times with a V and not a R. Is there a way to revoke a certificate based on CN and Serial Number or can I just edit index.txt and change the V to an R?

dropje

Hi,

You can change index.txt by replacing the V with an R but you also have to add a revocation timestamp. After that generate a new CRL using openssl tools.
Or if you still have the client certificate you can use that to revoke. Check out:
http://gagravarr.org/writing/openssl-certs/ca.shtml#ca-revoke
for more information.