Ives Steglich wrote:
do you think it would be a good idea to have this configurable? like in config.xml: SHOW_ERROR_MSGS = [YES|NO]the saver (in case one doesn't like this) default config would then be [NO] - so a user or tester would just see: "General Error" or "Configuraton Error" without any further details, which can be found in the local logfiles
This is definitely a good idea. initCGI, btw, also leaks path information if the OpenCA server is not running.
In openCA 0.9.2.4, line 134 should be changed so it does not include $_[0]. regards, Juergen
smime.p7s
Description: S/MIME Cryptographic Signature
