Subject: Re: [RFE] STR #2433: Update SNMP backend to do port probes at print-time - msg#00024

Previous Message by Date: click to view message preview

SSL Modification

In refrence to http://www.cups.org/newsgroups.php?s16046+gcups.general+v16046+T0 Since I have a working solution that involves a code change, I'm posting it here instead of in the orriginal thread. The problem turned out to be an issue with the interoperability between Windows and OpenSSL using the DES-CBC3-SHA cipher. Fortunatly OpenSSL has a workaround using the SSL_CTX_set_options() to pass through a SSL_OP_ALL flag. I got cups working by modifying two files and adding a line in order to set the options(I'm using CUPS 1.3.7): cups/http.c line 2706 SSL_CTX_set_options(context, SSL_OP_ALL); scheduler/client.c line 2948 SSL_CTX_set_options(context, SSL_OP_ALL); The problem is SS_OP_ALL sets about 10 flags that could have a negative security impact on the cupsd daemon. I need to going through each flag to narrow down the combination of options that needs to be set for this to work. In addition, setting this flag should probably be configurable in the cupsd.conf file, and should not be enabled by default.

Next Message by Date: click to view message preview

Re: [RFE] STR #1764: Make handling of backend errors more configurable

DO NOT REPLY TO THIS MESSAGE. INSTEAD, POST ANY RESPONSES TO THE LINK BELOW. [STR New] Hi Till, You probably saw my other STR 2555 post, about this. Basically we now use BEH for all our printers in CUPS to retry jobs, while preserving the sequence. This is the only way thus far found that can do this. I do see a need for BEH, until it or equivalent features are implemented in CUPS or it's backends. The only problem thus far found with BEH is that if I stop a printer while it was trying to submit a job to the printer, it's child lpd process does not get killed when it is killed by CUPS. Instead the child goes to init as the parent and I have to kill it manually in Unix. Link: http://www.cups.org/str.php?L1764 Version: -feature

Previous Message by Thread: click to view message preview

SSL Modification

In refrence to http://www.cups.org/newsgroups.php?s16046+gcups.general+v16046+T0 Since I have a working solution that involves a code change, I'm posting it here instead of in the orriginal thread. The problem turned out to be an issue with the interoperability between Windows and OpenSSL using the DES-CBC3-SHA cipher. Fortunatly OpenSSL has a workaround using the SSL_CTX_set_options() to pass through a SSL_OP_ALL flag. I got cups working by modifying two files and adding a line in order to set the options(I'm using CUPS 1.3.7): cups/http.c line 2706 SSL_CTX_set_options(context, SSL_OP_ALL); scheduler/client.c line 2948 SSL_CTX_set_options(context, SSL_OP_ALL); The problem is SS_OP_ALL sets about 10 flags that could have a negative security impact on the cupsd daemon. I need to going through each flag to narrow down the combination of options that needs to be set for this to work. In addition, setting this flag should probably be configurable in the cupsd.conf file, and should not be enabled by default.

Next Message by Thread: click to view message preview

Re: [RFE] STR #1764: Make handling of backend errors more configurable

DO NOT REPLY TO THIS MESSAGE. INSTEAD, POST ANY RESPONSES TO THE LINK BELOW. [STR New] Hi Till, You probably saw my other STR 2555 post, about this. Basically we now use BEH for all our printers in CUPS to retry jobs, while preserving the sequence. This is the only way thus far found that can do this. I do see a need for BEH, until it or equivalent features are implemented in CUPS or it's backends. The only problem thus far found with BEH is that if I stop a printer while it was trying to submit a job to the printer, it's child lpd process does not get killed when it is killed by CUPS. Instead the child goes to init as the parent and I have to kill it manually in Unix. Link: http://www.cups.org/str.php?L1764 Version: -feature