How to full remove client - certificate
When I revoke the name stays in list
Gunthervc
All 5 comments
A revoked cert will stay in the list, so you know it is revoked. you can at that time gen a new cert with that name.
0-kaladin
on 4 Apr 2017
Ok thank you
Gunthervc
on 7 Apr 2017
Would it be possible to update pivpn -l so that you can also filter by the kind of records you want to see. For example pivpn -l -f [valid|revoked|all would show
only the record that you have chosen with -f flag.
Not specifying -f can be same as -f all.
harmanbirdi
on 1 Nov 2017
change directory to /etc/openvpn/easy-rsa/pki
read the index.txt file. It will contain the list of all the user certificates created including those revoked. The fist letter V indicates the user is valid, and R is for revoked. Delete those revoked in the list from the text file and save it. Next time you type pyvpn -l, it will only show the valid users.
emoninet2
on 11 Jan 2019
Thanks, what about wireguard? I tried navigating to that file, but it doesn't exist for wireguard.
snakedog116
on 3 Mar 2020
Related issues
InnovativeInventor
路
6Comments
rothgar
路
6Comments
fortresscrasher
路
3Comments
mxmlkzdh
路
7Comments
ghost
路
3Comments
Most helpful comment
change directory to /etc/openvpn/easy-rsa/pki
read the index.txt file. It will contain the list of all the user certificates created including those revoked. The fist letter V indicates the user is valid, and R is for revoked. Delete those revoked in the list from the text file and save it. Next time you type pyvpn -l, it will only show the valid users.