TinCanTech

I believe that EasyRSA should remove `x509-types/kdc`. **Un**officially deprecate `x509-types/kdc`.

~~If there is no community support for this then **it will be removed before the official Release of version `3.1.1`**~~ Last chance ..

Using LibreSSL to build a `kdc` X509 type: ``` tct@home:~/git/easy-rsa/test/installed/test D$ EASYRSA_OPENSSL=/home/tct/libressl/libressl-3.5.3/apps/openssl/openssl easyrsa init-pki WARNING!!! You are about to remove the EASYRSA_PKI at: * /home/tct/git/easy-rsa/test/installed/test D/pki and initialize a fresh...

@Nyr The problem here is caused by: https://github.com/OpenVPN/easy-rsa/blob/2083fb29b512c5b2fccf65db8e5f89771fbf90f5/easyrsa3/easyrsa#L1318-L1324 You need to update your copy of `openssl-easyrsa.cnf`.

Thanks for the extra details, I am testing.

Sorry. I cannot replicate the issue here. @Nyr My first guess would be that you follow development here quite closely and so you have already tested the new `data-dir` locations,...

> To be specific it happens in a clean Debían 11 image at Linode Then perhaps Linode have the same issue. They may have an old version of easyrsa installed...

I could have made the check above only issue a warning but I would prefer to see all old `openssl-easyrsa.cnf` replaced. Even at this level of inconvenience.

This could be related to and even fixed by #723

@Nyr Thanks to your feedback, I have just pushed a change to Easy-RSA unit-test which will allow it to be run on the downloaded/extracted release tar-ball. Download [easyrsa-unit-tests.sh](https://raw.githubusercontent.com/OpenVPN/easyrsa-unit-tests/master/easyrsa-unit-tests.sh) to the...