[cups-devel] [HIGH] STR #4476: CUPS needs a way to control the use of cipher suites and protocol versions

[Tim Waugh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR Resolved]

+    gnutls_priority_set_direct(http->tls,
"NORMAL:VERS-TLS-ALL:-VERS-SSL3.0", NULL);

Also I think that should read "NORMAL:+VERS-TLS-ALL:-VERS-SSL3.0"
(VERS-TLS-ALL needs a + in front), or even better: "NORMAL:-VERS-SSL3.0".

Link: https://www.cups.org/str.php?L4476
Version: 1.4.2
Fix Version: 2.1-current (r12215)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=IqTH
-----END PGP SIGNATURE-----