I recently setup an OpenVPN server with easy-rsa and have questions about certificate revocation:
In the event that someone's private key gets compromised and I have to revoke the certificate with revoke-full
, do I need to keep the revoked .crt/.csr/.key
on the server?
I'm asking because I'm using the certificate owner's full name as the certificate name and was wondering how I would generate a new certificate with the same name if there is already a (revoked) certificate with that name.