| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
- cups/http-private.h: Move TLS/SSL version options to separate version
constants, make _httpTLSSetOptions take min/max version numbers.
- cups/tls-*.c: Update _httpTLSSetOptions and _httpTLSStart to use new min/max
version numbers.
- cups/tlscheck.c: Update _httpTLSSetOptions call.
- cups/usersys.c: Support new SSLOptions values, update _httpTLSSetOptions call.
- scheduler/conf.c: Support new SSLOptions values, update _httpTLSSetOptions
calls.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Also make sure that client.conf SSLOptions do not override cupsd.conf
SSLOptions, and document the (hopefully obvious) fact that Allow* is less
secure and Deny* is more secure.
- cups/http-private.h: Add "_HTTP_TLS_SET_DEFAULT" flag for options set from
client.conf.
- cups/tls-*.c: Use new flag.
- cups/tls-gnutls.c: Fix CBC cipher suite exclusion logic, and always disable
anonymous DH.
- cups/usersys.c: Pass new flag when calling _httpTLSSetOptions.
- man/*: Update documentation.
|
| |
|
|
|
|
|
|
| |
`DenyCBC` and
`DenyTLS1.0` options (Issue #5037)
|
| |
|
| |
|
|
|
|
| |
Bump copyright to 2017 in web interface and README files.
|
| |
|
|
|
|
|
|
|
|
|
| |
to trusted printers/servers (<rdar://problem/25711658>)
This change also makes the default value of AllowExpiredCerts NO instead of YES.
Finally, add support for loading most client.conf options (NOT ServerName or
User) from /Library/Printers/org.cups.PrintingPrefs.plist on OS X.
|
| |
|
| |
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@13029 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12892 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12817 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12812 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12647 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
DH/DHE support is being made optional because of known security issues with short
DH parameters. Since there is no way to conditionally use DH/DHE with a minimum
number of bits, we just have to disable it by default.
TLS/1.0 support can now be disabled due to known security issues with TLS/1.0.
However, since TLS/1.1 and TLS/1.2 support is not universally available, we
cannot simply disable TLS/1.0 like we did for SSL/3.0.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12645 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
|
| |
commands (STR #4528)
Load default client.conf values in the proper order, and then allow them to be
overridden.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12480 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
| |
(STR #4531)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12311 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
| |
SSL 3.0 and RC4 (STR #4476)
(currently RC4 cipher restrictions are not implemented on OS X or Windows)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12211 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
| |
Also correct GCC 4.8 compiler warnings.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12124 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
| |
(STR #4426)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11908 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add new CUPS_VALIDATECERTS (ValidateCerts in the conf file) setting to control
whether we require the common name to match the host name, default is no.
(currently)
httpCredentialsGetTrust now only checks hostname/common name matches when
validation is enabled. Otherwise we just look for changes to certs.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11851 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11824 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
| |
#4361)
VEOL2 isn't available on older System V versions, apparently...
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11628 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
| |
usage.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11558 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
| |
the user ID (STR #4327)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11509 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
|
| |
~/.cups/client.conf (STR #4319)
Don't use the HOME environment variable when running setuid, setgid, or as root.
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11484 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
|
|
| |
request message (<rdar://problem/14401718>)
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11113 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11085 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@10996 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4274 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4216 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4167 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4125 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3933 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3794 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3683 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3643 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
|
|
| |
<rdar://problem/10127258> CUPS 1.6: New printer/printing APIs
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3618 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3411 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3275 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3247 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3242 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3122 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@2848 a1ca3aef-8c08-0410-bb20-df032aa958be
|
|
|
|
| |
git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@2683 a1ca3aef-8c08-0410-bb20-df032aa958be
|