Commit d056bc0118 for openssl.org
commit d056bc011810c6ca96098b271bcc98bab96cffac
Author: Teddy Engel <engel.teddy@gmail.com>
Date: Mon May 18 15:30:18 2026 +0100
Remove unused crl_dir setting from config files
The crl_dir setting in CA_default section is not used anywhere. Remove
it from the example config and test configs, update the VMSify-conf.pl
path conversion script to no longer reference it, and regenerate
openssl-vms.cnf.
Fixes #31103
CLA: trivial
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Daniel Kubec <kubec@openssl.foundation>
MergeDate: Wed Jun 3 11:37:02 2026
(Merged from https://github.com/openssl/openssl/pull/31215)
diff --git a/VMS/VMSify-conf.pl b/VMS/VMSify-conf.pl
index a3844e505c..bc7392fde3 100644
--- a/VMS/VMSify-conf.pl
+++ b/VMS/VMSify-conf.pl
@@ -10,7 +10,7 @@
use strict;
use warnings;
-my @directory_vars = ( "dir", "certs", "crl_dir", "new_certs_dir" );
+my @directory_vars = ( "dir", "certs", "new_certs_dir" );
my @file_vars = ( "database", "certificate", "serial", "crlnumber",
"crl", "private_key", "RANDFILE" );
while(<STDIN>) {
diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 1378dfe248..cc465c420e 100644
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -91,7 +91,6 @@ default_ca = CA_default # The default ca section
dir = sys\$disk:[.demoCA # Where everything is kept
certs = $dir.certs] # Where the issued certs are kept
-crl_dir = $dir.crl] # Where the issued crl are kept
database = $dir]index.txt # database index file.
#unique_subject = no # Set to 'no' to allow creation of
# several certs with same subject.
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index c5b7262078..03429af34a 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -91,7 +91,6 @@ default_ca = CA_default # The default ca section
dir = ./demoCA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
-crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
#unique_subject = no # Set to 'no' to allow creation of
# several certs with same subject.
diff --git a/test/ca-and-certs.cnf b/test/ca-and-certs.cnf
index 78016a4323..30838831be 100644
--- a/test/ca-and-certs.cnf
+++ b/test/ca-and-certs.cnf
@@ -75,7 +75,6 @@ default_ca = CA_default
[ CA_default ]
dir = ./demoCA
certs = $dir/certs
-crl_dir = $dir/crl
database = $dir/index.txt
new_certs_dir = $dir/newcerts
certificate = $dir/cacert.pem
diff --git a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
index 5959b23e4b..45b85c4c9a 100644
--- a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
+++ b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
@@ -13,7 +13,6 @@ default_ca = CA_default # The default ca section
dir = ./demoCA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
-crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
new_certs_dir = $dir/new_certs # default place for new certs.
diff --git a/test/test.cnf b/test/test.cnf
index 3d1a823a7a..a4d8355c5b 100644
--- a/test/test.cnf
+++ b/test/test.cnf
@@ -8,7 +8,6 @@ default_ca = CA_default # The default ca section
dir = ./demoCA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
-crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
new_certs_dir = $dir/new_certs # default place for new certs.