I recently setup an OpenVPN server with easy-rsa and have questions about certificate revocation:
In the event that someone's private key gets compromised and I have to revoke the certificate with
revoke-full, do I need to keep the revoked
.crt/.csr/.key on the server?
I'm asking because I'm using the certificate owner's full name as the certificate name and was wondering how I would generate a new certificate with the same name if there is already a (revoked) certificate with that name.