View Issue Details

IDProjectCategoryView StatusLast Update
0000417Main CAcert Websitewebsite contentpublic2013-01-14 21:28
Reporterhanno Assigned ToSourcerer  
Status closedResolutionfixed 
Fixed in Version2007 
Summary0000417: shows directory listing
Description shows an apache directory listing.

Most probably not the way it should be. BTW, especially for a highsecurity-site like cacert, it's probably a good idea to turn indexes off in the apache config.
TagsNo tags attached.
Reviewed by
Test Instructions



2007-02-26 16:44

developer   ~0000808

Why is this an issue security or otherwise?


2007-03-20 10:56

reporter   ~0000817

Well maybe you should ask the people who visited the CAcert meeting what they think about getting watched at It is simple a bad behaviour to offer directory listings for people who are looking for information, especially for those who are looking for the CPS document, which should be there as mentioned at the new client certificate request form (


2007-03-27 19:51

developer   ~0000823

<ascii`> <-- can be solved with an .htaccess with Options -Indexes -FollowSymLinks depending on the AllowOverride of the father
<ascii`> prabably it's good to disable directory listing system wide
<ascii`> in apache.conf/httpd.conf inside the <Directory /> section
<udontknow> sourcerer: test1 time :P
<sourcerer> As far as I understood Duane, the directory listing was intentional
<udontknow> sourcerer: for docs/
<udontknow> sourcerer: or what?
<ascii`> okay lets' just check that the default value is -Indexes
<sourcerer> Yes, the /docs directory listing was intentional, I think
<sourcerer> I changed it to -Indexes now

this bug is now resolved


2007-03-30 10:30

developer   ~0000830

Last edited: 2007-03-30 10:34

Please undo these changes there are numerous files in that directory that isn't linked to by other pages, this directory was intensionally left viewable for a reason and now it's broken.

Not to mention this change was pointless since the same files are in the source file tar ball.

Issue History

Date Modified Username Field Change
2007-02-26 04:38 hanno New Issue
2007-02-26 16:44 duane Note Added: 0000808
2007-03-20 10:56 beastie Note Added: 0000817
2007-03-27 19:51 ascii Note Added: 0000823
2007-03-27 19:52 ascii Status new => closed
2007-03-27 19:52 ascii Resolution open => fixed
2007-03-30 10:30 duane Note Added: 0000830
2007-03-30 10:31 duane Assigned To => Sourcerer
2007-03-30 10:31 duane Status closed => needs work
2007-03-30 10:32 duane Resolution fixed => open
2007-03-30 10:34 duane Note Edited: 0000830
2007-07-30 21:12 Sourcerer Status needs work => closed
2007-07-30 21:12 Sourcerer Resolution open => fixed
2013-01-14 21:28 Werner Dworak Fixed in Version => 2007