You can use CAN_Start() for restarting CAN after bus off.
Can you try it at your end?
Thanks for your reply.
I reworked our initialization code to call CAN_Start() (rather than CAN_Init() and CAN_Enable() separately), then call CAN_Start() to reset the CAN component, and I see messages on the bus now. So, I think the issue is resolved.