[solved] CRL check failed

[weiliang]

I accidentally revoked one of my certificate. After that no client can connect to my vpn server, the log said : CRL CHECK FAILED: /O=cpu/CN=vpn-mdncpu is REVOKED

So I tried to renew the certificate, but the error still the same,

then  I tried to create new certificate with name vpn-mdncpu-new and change the certificate at the server setting and re-upload the new package to client, why the error still the same? vpn-mdncpu is REVOKED, I thought I'm using the new cert : vpn-mdncpu-new

[weiliang]

I saw in this thread http://forum.zentyal.org/index.php?topic=4185.0 that revoked cert cannot be removed permanently. So what if there is a special situation like this? at least tell me which files should I edit or remove to clear the CRL list. Thanks.

EDIT: found them at /var/lib/zentyal/CA