[cups.bugs] [HIGH] STR #2827: SSL interoperability with Windows in FIPS compliance mode

Ryan Holliday rholliday at bcssi.com
Tue May 20 10:30:12 PDT 2008


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Refrence to thread:
http://www.cups.org/newsgroups.php?s2613+gcups.development+v2617+T0

Reccommend adding an option in cupsd.conf in order to enable the following
SSL settings:

cups/http.c line 2706:
SSL_CTX_set_options(context, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
scheduler/client.c line 2948
SSL_CTX_set_options(context, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);

Rationale and description of the problem will be added to the above
thread.

Link: http://www.cups.org/str.php?L2827
Version: 1.3.7





More information about the cups mailing list