How to invalidate existing server certificates?

[pyite]

We have a set of OpenVPN servers on different ports.

They are for short term use, and we would like to invalidate the client .ovpn files periodically. Is there any way to do this? Renew or reissue of the server cert or CA cert doesn't prevent the old .ovpn file from allowing connections.

If we delete and re-create the servers, it seems to do what we want, but there must be an easier way.

Thanks

[viragomann]

@pyite
You can revoke the client certificate to prevent using it to connect.

To do so, you have to create revocation lists for the used CAs in System > Certificates > Revocation, as long as you didn't this already. Then assign it your VPN servers.