You can try running the following command to generate the CRL, and revoking the certificate, manually:
openssl ca -revoke <cert> -config <config>
Replace <cert> above with the path to your CA certificate, and replace <config> with your openssl config file. I'm not really an expert with easy-rsa, as I think the suite of scripts is really lacking.
