Categories:
DH Keys (39)
DSA Keys (69)
EC Keys (335)
Firefox (32)
General (13)
Google Chrome (25)
Intermediate CA (152)
Java VM (20)
JDK Keytool (25)
Microsoft CertUtil (26)
Mozilla CertUtil (18)
OpenSSL (237)
Other (17)
Portecle (38)
Publishers (1963)
Revoked Certificates (30)
Root CA (87)
RSA Keys (1812)
Tools (47)
Tutorial (7)
What Is (21)
Windows (129)
Collections:
Other Resources:
OpenSSL "ca -revoke" - Revoke a Certificate
How to revoke a certificate using the OpenSSL "ca" command? The certificate was signed by me with my CA certificate, but now it is no longer needed.
✍: FYIcenter.com
If you want revoke a certificate that was signed by you previously,
you can use the OpenSSL "ca -revoke" command to revoke it.
Actually, the certificate can not be destroyed. It will just be declared as invalid,
The following test shows you how to revoke a certificate using the "ca -revoke" command:
C:\Users\fyicenter>\local\OpenSSL-Win32\bin\openssl.exe OpenSSL> ca -revoke test.crt -keyfile my_ca.key -cert my_ca.crt Using configuration from C:\local\OpenSSL-Win32\bin\openssl.cfg Enter pass phrase for my_ca.key:fyicenter Revoking Certificate 1000. Data Base Updated
Notes about the above test:
⇒ OpenSSL "ca" - Sign the CSR Again
⇐ OpenSSL "ca" Error "failed to update database TXT_DB error number 2"
2016-09-10, 2256👍, 0💬
Popular Posts:
How to list all options that are supported by a specific OpenSSL command? I know the command but I d...
How to get the hash value (or thumbprint value) of a certificate? I have the certificate stored in D...
How to export the public key out from a certificate using OpenSSL "x509" command? You can export the...
Certificate summary - Owner: Go Daddy Secure Certificate Authority - G2, http://certs.godaddy.com /re...
How to see the list of trusted root Certification Authorities (CA) and their certificates used by Go...