Remove unused crl_dir setting from config files

The crl_dir setting in CA_default section is not used anywhere. Remove
it from the example config and test configs, update the VMSify-conf.pl
path conversion script to no longer reference it, and regenerate
openssl-vms.cnf.

Fixes #31103

CLA: trivial

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Daniel Kubec <kubec@openssl.foundation>
MergeDate: Wed Jun  3 11:37:02 2026
(Merged from https://github.com/openssl/openssl/pull/31215)

diff --git a/VMS/VMSify-conf.pl b/VMS/VMSify-conf.pl
index a3844e505c2b700b3d0e6a3ca1033975ed6d371f..bc7392fde3da0a2187a5b92a90eb9675e2ab6938 100644 (file)
--- a/VMS/VMSify-conf.pl
+++ b/VMS/VMSify-conf.pl
@@ -10,7 +10,7 @@
 use strict;
 use warnings;
 
-my @directory_vars = ( "dir", "certs", "crl_dir", "new_certs_dir" );
+my @directory_vars = ( "dir", "certs", "new_certs_dir" );
 my @file_vars = ( "database", "certificate", "serial", "crlnumber",
                  "crl", "private_key", "RANDFILE" );
 while(<STDIN>) {

diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 1378dfe2480d01b9f342ce9aa5735875f80f9770..cc465c420e6583c2a456654e01867067c459a992 100644 (file)
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -91,7 +91,6 @@ default_ca    = CA_default            # The default ca section
 
 dir            = sys\$disk:[.demoCA            # Where everything is kept
 certs          = $dir.certs]           # Where the issued certs are kept
-crl_dir                = $dir.crl]             # Where the issued crl are kept
 database       = $dir]index.txt        # database index file.
 #unique_subject        = no                    # Set to 'no' to allow creation of
                                        # several certs with same subject.

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index c5b72620781306755c1a518c5720720793db2d8c..03429af34a1719cbd0dd93fa1ceeba6ecf33615d 100644 (file)
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -91,7 +91,6 @@ default_ca    = CA_default            # The default ca section
 
 dir            = ./demoCA              # Where everything is kept
 certs          = $dir/certs            # Where the issued certs are kept
-crl_dir                = $dir/crl              # Where the issued crl are kept
 database       = $dir/index.txt        # database index file.
 #unique_subject        = no                    # Set to 'no' to allow creation of
                                        # several certs with same subject.

diff --git a/test/ca-and-certs.cnf b/test/ca-and-certs.cnf
index 78016a43236c2c0b4b23a69f4552b6f907e8d422..30838831be3f4e08129ec68eb29ed1ee6cb7a814 100644 (file)
--- a/test/ca-and-certs.cnf
+++ b/test/ca-and-certs.cnf
@@ -75,7 +75,6 @@ default_ca    = CA_default
 [ CA_default ]
 dir            = ./demoCA
 certs          = $dir/certs
-crl_dir                = $dir/crl
 database       = $dir/index.txt
 new_certs_dir  = $dir/newcerts
 certificate    = $dir/cacert.pem

diff --git a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
index 5959b23e4b4be37492e3b4395c86461842bbf8e6..45b85c4c9abc688fe8f819f2a0ba88c29d94a7a5 100644 (file)
--- a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
+++ b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
@@ -13,7 +13,6 @@ default_ca    = CA_default            # The default ca section
 
 dir            = ./demoCA              # Where everything is kept
 certs          = $dir/certs            # Where the issued certs are kept
-crl_dir                = $dir/crl              # Where the issued crl are kept
 database       = $dir/index.txt        # database index file.
 new_certs_dir  = $dir/new_certs        # default place for new certs.
 

diff --git a/test/test.cnf b/test/test.cnf
index 3d1a823a7a4f1a8d2c9f0ff54ac54cc646320549..a4d8355c5b37e160710b488c1705c556f48f2e50 100644 (file)
--- a/test/test.cnf
+++ b/test/test.cnf
@@ -8,7 +8,6 @@ default_ca      = CA_default            # The default ca section
 
 dir            = ./demoCA              # Where everything is kept
 certs          = $dir/certs            # Where the issued certs are kept
-crl_dir                = $dir/crl              # Where the issued crl are kept
 database       = $dir/index.txt        # database index file.
 new_certs_dir  = $dir/new_certs        # default place for new certs.