summaryrefslogtreecommitdiff
path: root/cups/usersys.c
Commit message (Collapse)AuthorAgeFilesLines
* Sandboxed applications were not able to get the default printer (Issue #5676)Michael R Sweet2019-11-141-9/+2
| | | | | - Add "home" global pointing to the user's home directory. - Use it instead of getenv("HOME") everywhere we needed it.
* Add support for DigestOptions directive in client.conf (Issue #5647)Michael R Sweet2019-10-151-3/+30
|
* Add UserAgentTokens config directive (Issue #5555)Michael R Sweet2019-04-151-6/+90
| | | | | | | | | | | | cups/cups-private.h: - Add enum and value for UserAgentTokens directive. cups/usersys.c: - _cups_finalize_conf(): Copy UserAgentTokens value to globals. - _cups_init_conf(): Set default UserAgentTokens value and grab prefs. - _cups_read_conf(): Look for UserAgentTokens value. - _cups_set_uatokens(): Set UserAgentTokens value. - cupsSetUserAgent(): Support UserAgentTokens values.
* One more spot needs attention.Michael R Sweet2019-03-211-3/+8
|
* Clean up some build issues on certain platforms.Michael R Sweet2019-03-211-13/+14
|
* Fix iOS libcups builds (rdar://47386169)Michael R Sweet2019-01-181-23/+98
|
* Move debug printfs to internal usage only.Michael R Sweet2018-10-181-0/+1
| | | | Also, old MD5 code is internal-only.
* More build fixes.Michael R Sweet2018-10-161-1/+1
|
* Add missing DNSSD.LIB functions.Michael R Sweet2018-10-161-2/+2
|
* Migrate Windows conditional code to _WIN32 define.Michael R Sweet2018-10-101-11/+11
|
* Fix compile without HAVE_SSLStefan Scherer2018-01-091-0/+2
|
* Fix default TLS versions.Michael R Sweet2017-12-181-5/+7
|
* License change: Apache License, Version 2.0.Michael R Sweet2017-11-071-7/+1
|
* Add support for MinTLS and MaxTLS options (Issue #5119)Michael R Sweet2017-11-031-7/+29
| | | | | | | | | | | - cups/http-private.h: Move TLS/SSL version options to separate version constants, make _httpTLSSetOptions take min/max version numbers. - cups/tls-*.c: Update _httpTLSSetOptions and _httpTLSStart to use new min/max version numbers. - cups/tlscheck.c: Update _httpTLSSetOptions call. - cups/usersys.c: Support new SSLOptions values, update _httpTLSSetOptions call. - scheduler/conf.c: Support new SSLOptions values, update _httpTLSSetOptions calls.
* Fix cipher suite selection with GNU TLS (Issue #5145)Michael Sweet2017-10-191-1/+1
| | | | | | | | | | | | | | Also make sure that client.conf SSLOptions do not override cupsd.conf SSLOptions, and document the (hopefully obvious) fact that Allow* is less secure and Deny* is more secure. - cups/http-private.h: Add "_HTTP_TLS_SET_DEFAULT" flag for options set from client.conf. - cups/tls-*.c: Use new flag. - cups/tls-gnutls.c: Fix CBC cipher suite exclusion logic, and always disable anonymous DH. - cups/usersys.c: Pass new flag when calling _httpTLSSetOptions. - man/*: Update documentation.
* Fix memory leaks.Michael Sweet2017-09-141-2/+2
|
* The `SSLOptions` directive in "client.conf" and "cupsd.conf" now supports ↵Michael R Sweet2017-06-261-0/+2
| | | | | | `DenyCBC` and `DenyTLS1.0` options (Issue #5037)
* Save work on documentation.Michael Sweet2017-06-081-3/+3
|
* Documentation updates.Michael Sweet2017-05-311-1/+5
|
* Fix source file header text duplication text duplication.Michael R Sweet2017-01-161-1/+1
| | | | Bump copyright to 2017 in web interface and README files.
* Update all references to OS X to macOS.Michael R Sweet2016-06-201-8/+8
|
* Implement TrustOnFirstUse option and CRLs (GNU TLS) to allow for printing onlyMichael Sweet2016-05-181-2/+110
| | | | | | | | | to trusted printers/servers (<rdar://problem/25711658>) This change also makes the default value of AllowExpiredCerts NO instead of YES. Finally, add support for loading most client.conf options (NOT ServerName or User) from /Library/Printers/org.cups.PrintingPrefs.plist on OS X.
* Remove all of the Subversion keywords from various source files.Michael R Sweet2016-04-111-7/+0
|
* Changes to eliminate warnings from new Clang.Michael Sweet2016-03-231-1/+1
|
* The default password function did not work on some platforms (STR #4750)msweet2016-01-041-1/+3
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@13029 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fix access check for domain socket.msweet2015-10-081-4/+1
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12892 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fix domain socket support on Linux (STR #4679)msweet2015-07-301-1/+1
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12817 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fix processing of server overrides without port numbers (STR #4675)msweet2015-07-301-11/+26
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12812 a1ca3aef-8c08-0410-bb20-df032aa958be
* More tweaks for cipher suite restrictions.msweet2015-05-201-0/+2
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12647 a1ca3aef-8c08-0410-bb20-df032aa958be
* Add SSLOptions to enable Diffie-Hellman key exchange and disable TLS/1.0.msweet2015-05-201-3/+7
| | | | | | | | | | | | | | DH/DHE support is being made optional because of known security issues with short DH parameters. Since there is no way to conditionally use DH/DHE with a minimum number of bits, we just have to disable it by default. TLS/1.0 support can now be disabled due to known security issues with TLS/1.0. However, since TLS/1.1 and TLS/1.2 support is not universally available, we cannot simply disable TLS/1.0 like we did for SSL/3.0. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12645 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fix several issues with client.conf, CUPS_SERVER, and the "-h" option of mostmsweet2015-02-031-273/+354
| | | | | | | | | | commands (STR #4528) Load default client.conf values in the proper order, and then allow them to be overridden. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12480 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fixed builds when no SSL/TLS library is available, or when explicitly disabledmsweet2014-12-091-0/+4
| | | | | | | | (STR #4531) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12311 a1ca3aef-8c08-0410-bb20-df032aa958be
* Implement SSLOptions in cupsd.conf and client.conf to allow admins to enablemsweet2014-10-201-22/+72
| | | | | | | | | SSL 3.0 and RC4 (STR #4476) (currently RC4 cipher restrictions are not implemented on OS X or Windows) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12211 a1ca3aef-8c08-0410-bb20-df032aa958be
* Fix Linux builds without normal prerequisite libraries installed.msweet2014-08-281-0/+2
| | | | | | | Also correct GCC 4.8 compiler warnings. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12124 a1ca3aef-8c08-0410-bb20-df032aa958be
* The User directive in client.conf did not override the USER environment variablemsweet2014-06-091-27/+17
| | | | | | | | (STR #4426) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11908 a1ca3aef-8c08-0410-bb20-df032aa958be
* Add code to validate trust when printing via the IPP backend.msweet2014-05-071-5/+20
| | | | | | | | | | | | Add new CUPS_VALIDATECERTS (ValidateCerts in the conf file) setting to control whether we require the common name to match the host name, default is no. (currently) httpCredentialsGetTrust now only checks hostname/common name matches when validation is enabled. Otherwise we just look for changes to certs. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11851 a1ca3aef-8c08-0410-bb20-df032aa958be
* Save work.msweet2014-04-211-18/+1
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11824 a1ca3aef-8c08-0410-bb20-df032aa958be
* Several libcups files did not have the Apple license exception notice (STR ↵msweet2014-02-201-1/+4
| | | | | | | | | #4361) VEOL2 isn't available on older System V versions, apparently... git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11628 a1ca3aef-8c08-0410-bb20-df032aa958be
* Full sweep of all Clang warnings, plus some bug fixes for incorrect memcpy ↵msweet2014-02-061-2/+2
| | | | | | usage. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11558 a1ca3aef-8c08-0410-bb20-df032aa958be
* CUPS incorrectly used the USER environment variable when the name did not matchmsweet2014-01-081-1/+19
| | | | | | | | the user ID (STR #4327) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11509 a1ca3aef-8c08-0410-bb20-df032aa958be
* Security: the lppasswd program incorrectly used settings from ↵msweet2013-12-221-34/+15
| | | | | | | | | ~/.cups/client.conf (STR #4319) Don't use the HOME environment variable when running setuid, setgid, or as root. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11484 a1ca3aef-8c08-0410-bb20-df032aa958be
* The default IPP version did not always get set before creating a new IPPmsweet2013-07-101-0/+2
| | | | | | | | request message (<rdar://problem/14401718>) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11113 a1ca3aef-8c08-0410-bb20-df032aa958be
* Update version numbers.msweet2013-07-031-2/+2
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11085 a1ca3aef-8c08-0410-bb20-df032aa958be
* Update svn:keyword properties.msweet2013-05-291-2/+2
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@10996 a1ca3aef-8c08-0410-bb20-df032aa958be
* Merge changes from CUPS 1.7b1-r10947.msweet2013-04-091-30/+1
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4274 a1ca3aef-8c08-0410-bb20-df032aa958be
* Sync up with CUPS 1.7svn-r10893msweet2013-03-111-6/+6
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4216 a1ca3aef-8c08-0410-bb20-df032aa958be
* Merge changes from CUPS 1.7svn-r10861.msweet2013-02-041-9/+89
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4167 a1ca3aef-8c08-0410-bb20-df032aa958be
* Merge changes from CUPS 1.7svn-r10814.msweet2013-01-141-3/+21
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@4125 a1ca3aef-8c08-0410-bb20-df032aa958be
* Merge changes from CUPS 1.7svn-r10629.msweet2012-10-011-3/+3
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3933 a1ca3aef-8c08-0410-bb20-df032aa958be
* Merge changes from CUPS 1.6svn-r10437.msweet2012-04-231-6/+6
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/easysw/current@3794 a1ca3aef-8c08-0410-bb20-df032aa958be