Disabling CRL entirely?

[jdinel]

I am using easy-ca in a few lab environments where disabling the CRL entirely is desirable. Is this achievable with easy-ca?

[zqad]

If you want to drop the CRL distribution URL, the easiest way is to locally edit the openssl config (ca.conf) and remove the crlDistributionPoints before issuing any certs. These are generated from root.tpl and signing.tpl if you want to make the change in git. Note that the extension appears in multiple places in the file, once for each cert type.

I've got a few edits to most of my CA deployments for local changes like this that does not seem to make sense for upstream such as looking up CNs against our LDAP.