[cups.general] cups 1.3 and tls encryption

[Michael R Sweet]

Dave wrote:
> Hello,
>     I've got cups 1.3 working as a network print server. I'd like to secure 
> it, the admin functions, login, with tls, and md5 passwords. I can get the 
> md5 with digest authentication, but i haven't found any howtos on tls and 
> cups. Items that i did find were cups 1.1 and refer to directories that 
> aren't in my cups install. If anyone has this working i'd like to hear from 
> you.

In general, if you have configured CUPS with SSL support, it will
automatically create the server-side certificate and key as needed,
and require encryption (via the DefaultEncryption directive in the
cupsd.conf file) any time you are authenticating on a remote
interface.  On anything other than Mac OS X, you'll find the auto-
generated certificate and key in the /etc/cups/ssl directory (on
Mac OS X the cert is part of the system keychain and is used by all
of the services needing a common server cert...)

If you authenticate on localhost, it doesn't bother doing encryption
(although you can force it via the Encryption directive in each
Location section, again in /etc/cups/cupsd.conf...)

-- 
______________________________________________________________________
Michael R Sweet                        Senior Printing System Engineer