Deleting revoked certs from CA master

[Mark Haney]

So now that we have a nicely replicating domain and ca, I'd like to rid 
myself of these revoked certificates which I tried as a way to fix the 
replication and setting up of a CA.  Is there a way to delete these 
certs out of the store?

[Rob Crittenden]

Mark Haney via FreeIPA-users wrote:
> So now that we have a nicely replicating domain and ca, I'd like to rid
> myself of these revoked certificates which I tried as a way to fix the
> replication and setting up of a CA.  Is there a way to delete these
> certs out of the store?

You'd have to do it using LDAP directly. There is nothing really wrong
with having a few revoked certs.

rob

[Mark Haney]

On 08/04/2017 02:19 PM, Rob Crittenden wrote:
> You'd have to do it using LDAP directly. There is nothing really wrong
> with having a few revoked certs.
>
> rob

I suppose that's fine, it just offends my sense of order.  Thanks for 
the info.