How can I revoke a cert that doesn't have a serial.txt entry?

alohaaaron

Hi, I have a cert that I want to revoke but the entry is not in the serial.txt file.
I have the original key,csr, crt, and pem file.
Could I regenerate the entry in the index.txt file using the existing files and then revoke it?
Thanks!

TinCanTech

Who put you in charge of more than one server ?

Do you understand what openssl is ?

alohaaaron

The question is simplified in order to get a helpful answer.
Please remove yourself from the open vpn forum. We need helpful and thoughtful people in public forums and in general that enjoy sharing their years of knowledge, skill, and expertise with the community.
Here is the answer to the question provided by maikcat (global moderator)
https://forums.openvpn.net/viewtopic.php?t=11319

TinCanTech

If you have a certificate which is not in index.txt then it's not part of that CA and the solution you found will not work.

300000

"have the original key,csr, crt, and pem file" That is all need to revoke a certificate and after that you need generate new revocation checklist to make system work for you. you dont need to use EasyRSA at all so dont need serial.txt entry anyway and all multi error with command line nobody like to use. Just find better and faster tool to do the same job.

Yes it is very simple task to do and you can download XCA software to help you doing that . Please remember only new revocation check list will make certificate invalid so if you dont know what to do with CA and try revoke it may be not work as you expect.