Skip to content

AleksaMCode/openssl-unrevoke-certificate-script

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 

Repository files navigation

OPENSSL Unrevoke Certificate

Did you ever want to unrevoke a certificate you have previously revoked using openessl without manually changing a index.txt file? I know I have, especially when I was first learning to use openssl. Now you can unrevoke the certificate simply by executing a python script.

NOTE:

I'm fully aware that once the certificate is on the revoked list it should stay there. That's why it's recommended to never revoke it unless you know it's been compromised. You could make an argument for unrevoking the certificate that has been revoked with the revocation reason code Certificate Hold.

Usage

You need to run the python script with two arguments, a name of the CA database, which is index.txt by default, and a serial number of the revoked certificate, i.e.

$ python3 openssl-unrevoke.py index.txt C1