fme Hello, I've few questions. What is the proper way to renew expiring client certificates with the same cn? Can the old certificate used until its end, or is the old cert revoked, if the new one is created? When is the index.txt updated (setting the status from V to E)? (Or was this a TinyCA GUI related stuff?) I'm also trying to renew all client certificates because I changed the key length. I hoped that I could simply set a future enddate in the index.txt so that people can still use the old certificate until they have exchanged it. That didn `t work. Is there a trick or did I do something wrong? Thanks Frank
TinCanTech fme wrote What is the proper way to renew expiring client certificates with the same cn? Use Easy-RSA 'renew' https://github.com/OpenVPN/easy-rsa