summaryrefslogtreecommitdiff
path: root/cups/usersys.c
diff options
context:
space:
mode:
authorMichael R Sweet <michaelrsweet@gmail.com>2017-06-26 13:22:57 -0400
committerMichael R Sweet <michaelrsweet@gmail.com>2017-06-26 13:22:57 -0400
commitf2e8714723abaa8c0e05abaf2f64e45ad5856598 (patch)
treecdb76e296685c05d45bb31b5af8c99e1d4fc4293 /cups/usersys.c
parent8d7d268f61befd7a6de3048e063d656e9b6402b7 (diff)
downloadcups-f2e8714723abaa8c0e05abaf2f64e45ad5856598.tar.gz
The `SSLOptions` directive in "client.conf" and "cupsd.conf" now supports `DenyCBC` and
`DenyTLS1.0` options (Issue #5037)
Diffstat (limited to 'cups/usersys.c')
-rw-r--r--cups/usersys.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/cups/usersys.c b/cups/usersys.c
index 88cccfa23..ff5cb3083 100644
--- a/cups/usersys.c
+++ b/cups/usersys.c
@@ -1367,6 +1367,8 @@ cups_set_ssl_options(
options |= _HTTP_TLS_ALLOW_SSL3;
else if (!_cups_strcasecmp(start, "AllowDH"))
options |= _HTTP_TLS_ALLOW_DH;
+ else if (!_cups_strcasecmp(start, "DenyCBC"))
+ options |= _HTTP_TLS_DENY_CBC;
else if (!_cups_strcasecmp(start, "DenyTLS1.0"))
options |= _HTTP_TLS_DENY_TLS10;
else if (!_cups_strcasecmp(start, "None"))