From: Teddy Engel <engel.teddy@gmail.com>
Date: Mon, 18 May 2026 14:30:18 +0000 (+0100)
Subject: Remove unused crl_dir setting from config files
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=d056bc011810c6ca96098b271bcc98bab96cffac;p=thirdparty%2Fopenssl.git

Remove unused crl_dir setting from config files

The crl_dir setting in CA_default section is not used anywhere. Remove
it from the example config and test configs, update the VMSify-conf.pl
path conversion script to no longer reference it, and regenerate
openssl-vms.cnf.

Fixes #31103

CLA: trivial

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
Reviewed-by: Daniel Kubec <kubec@openssl.foundation>
MergeDate: Wed Jun  3 11:37:02 2026
(Merged from https://github.com/openssl/openssl/pull/31215)
---

diff --git a/VMS/VMSify-conf.pl b/VMS/VMSify-conf.pl
index a3844e505c2..bc7392fde3d 100644
--- a/VMS/VMSify-conf.pl
+++ b/VMS/VMSify-conf.pl
@@ -10,7 +10,7 @@
 use strict;
 use warnings;
 
-my @directory_vars = ( "dir", "certs", "crl_dir", "new_certs_dir" );
+my @directory_vars = ( "dir", "certs", "new_certs_dir" );
 my @file_vars = ( "database", "certificate", "serial", "crlnumber",
 		  "crl", "private_key", "RANDFILE" );
 while(<STDIN>) {
diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 1378dfe2480..cc465c420e6 100644
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -91,7 +91,6 @@ default_ca	= CA_default		# The default ca section
 
 dir		= sys\$disk:[.demoCA		# Where everything is kept
 certs		= $dir.certs]		# Where the issued certs are kept
-crl_dir		= $dir.crl]		# Where the issued crl are kept
 database	= $dir]index.txt	# database index file.
 #unique_subject	= no			# Set to 'no' to allow creation of
 					# several certs with same subject.
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index c5b72620781..03429af34a1 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -91,7 +91,6 @@ default_ca	= CA_default		# The default ca section
 
 dir		= ./demoCA		# Where everything is kept
 certs		= $dir/certs		# Where the issued certs are kept
-crl_dir		= $dir/crl		# Where the issued crl are kept
 database	= $dir/index.txt	# database index file.
 #unique_subject	= no			# Set to 'no' to allow creation of
 					# several certs with same subject.
diff --git a/test/ca-and-certs.cnf b/test/ca-and-certs.cnf
index 78016a43236..30838831be3 100644
--- a/test/ca-and-certs.cnf
+++ b/test/ca-and-certs.cnf
@@ -75,7 +75,6 @@ default_ca	= CA_default
 [ CA_default ]
 dir		= ./demoCA
 certs		= $dir/certs
-crl_dir		= $dir/crl
 database	= $dir/index.txt
 new_certs_dir	= $dir/newcerts
 certificate	= $dir/cacert.pem
diff --git a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
index 5959b23e4b4..45b85c4c9ab 100644
--- a/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
+++ b/test/recipes/90-test_includes_data/conf-includes/includes1.cnf
@@ -13,7 +13,6 @@ default_ca	= CA_default		# The default ca section
 
 dir		= ./demoCA		# Where everything is kept
 certs		= $dir/certs		# Where the issued certs are kept
-crl_dir		= $dir/crl		# Where the issued crl are kept
 database	= $dir/index.txt	# database index file.
 new_certs_dir	= $dir/new_certs	# default place for new certs.
 
diff --git a/test/test.cnf b/test/test.cnf
index 3d1a823a7a4..a4d8355c5b3 100644
--- a/test/test.cnf
+++ b/test/test.cnf
@@ -8,7 +8,6 @@ default_ca	= CA_default		# The default ca section
 
 dir		= ./demoCA		# Where everything is kept
 certs		= $dir/certs		# Where the issued certs are kept
-crl_dir		= $dir/crl		# Where the issued crl are kept
 database	= $dir/index.txt	# database index file.
 new_certs_dir	= $dir/new_certs	# default place for new certs.