From ec8beb8952388a3ce650cc1477cd386546ed7318 Mon Sep 17 00:00:00 2001 From: Michael R Sweet Date: Tue, 15 Oct 2019 17:34:21 -0400 Subject: Add support for DigestOptions directive in client.conf (Issue #5647) --- doc/help/man-client.conf.html | 22 +++++++++++++--------- 1 file changed, 13 insertions(+), 9 deletions(-) (limited to 'doc') diff --git a/doc/help/man-client.conf.html b/doc/help/man-client.conf.html index 58b091fe0..032cd333d 100644 --- a/doc/help/man-client.conf.html +++ b/doc/help/man-client.conf.html @@ -19,28 +19,32 @@ See the NOTES section below for more information.

Directives

The following directives are understood by the client. Consult the online help for detailed descriptions:
-
AllowAnyRoot Yes +
AllowAnyRoot Yes
AllowAnyRoot No
Specifies whether to allow TLS with certificates that have not been signed by a trusted Certificate Authority. The default is "Yes". -
AllowExpiredCerts Yes +
AllowExpiredCerts Yes
AllowExpiredCerts No
Specifies whether to allow TLS with expired certificates. The default is "No". -
Encryption IfRequested +
DigestOptions DenyMD5 +
DigestOptions None +
Specifies HTTP Digest authentication options. +DenyMD5 disables support for the original MD5 hash algorithm. +
Encryption IfRequested
Encryption Never
Encryption Required
Specifies the level of encryption that should be used. -
GSSServiceName name +
GSSServiceName name
Specifies the Kerberos service name that is used for authentication, typically "host", "http", or "ipp". CUPS adds the remote hostname ("name@server.example.com") for you. The default name is "http". -
ServerName hostname-or-ip-address[:port] +
ServerName hostname-or-ip-address[:port]
ServerName /domain/socket
Specifies the address and optionally the port to use when connecting to the server. Note: This directive is not supported on macOS 10.7 or later.
ServerName hostname-or-ip-address[:port]/version=1.1
Specifies the address and optionally the port to use when connecting to a server running CUPS 1.3.12 and earlier. -
SSLOptions [AllowDH] [AllowRC4] [AllowSSL3] [DenyCBC] [DenyTLS1.0] [MaxTLS1.0] [MaxTLS1.1] [MaxTLS1.2] [MaxTLS1.3] [MinTLS1.0] [MinTLS1.1] [MinTLS1.2] [MinTLS1.3] +
SSLOptions [AllowDH] [AllowRC4] [AllowSSL3] [DenyCBC] [DenyTLS1.0] [MaxTLS1.0] [MaxTLS1.1] [MaxTLS1.2] [MaxTLS1.3] [MinTLS1.0] [MinTLS1.1] [MinTLS1.2] [MinTLS1.3]
SSLOptions None
Sets encryption options (only in /etc/cups/client.conf). By default, CUPS only supports encryption using TLS v1.0 or higher using known secure cipher suites. @@ -54,11 +58,11 @@ The DenyTLS1.0 option disables TLS v1.0 support - this sets the minimum p The MinTLS options set the minimum TLS version to support. The MaxTLS options set the maximum TLS version to support. Not all operating systems support TLS 1.3 at this time. -
TrustOnFirstUse Yes +
TrustOnFirstUse Yes
TrustOnFirstUse No
Specifies whether to trust new TLS certificates by default. The default is "Yes". -
User name +
User name
Specifies the default user name to use for requests.
UserAgentTokens None
UserAgentTokens ProductOnly @@ -76,7 +80,7 @@ The default is "Yes". "OS" reports "CUPS/major.minor.path (osname osversion) IPP/2.1". "Full" reports "CUPS/major.minor.path (osname osversion; architecture) IPP/2.1". The default is "Minimal". -
ValidateCerts Yes +
ValidateCerts Yes
ValidateCerts No
Specifies whether to only allow TLS with certificates whose common name matches the hostname. The default is "No". -- cgit v1.2.1