[cups.general] Adding Encrypted Printer

[Michael Sweet]

You can't set "Encryption Always" on the server, since the Encryption  
directive is only valid for locations and policies.  Use SSLPort or  
SSLListen for that.

That said, for any recent CUPS release, the auto-SSL code should pick  
up on the SSL encryption from the client end without problems.

CENTOS does ship with SSL support (via OpenSSL), so either you don't  
have a valid SSL certificate for CUPS setup (it should create a  
certificate and private key automatically, but if an invalid one is  
supplied it will spit out an error...) or the client-side is not  
configured properly.

If you *are* printing to another CUPS server, the URI you are  
providing is invalid. The correct URI format for a SSL connection is:

     ipp://host-or-ip:port/printers/printername?encryption=always

Alternately you can use "encryption=required" to do the HTTP Upgrade  
thing.


On Apr 19, 2009, at 7:53 PM, James Chase wrote:

>> See the documentation at:
>>
>>     http://www.cups.org/documentation.php/network.html
>>
>> Basically, add "?encryption=always" to the end of an IPP URI, e.g.:
>>
>>     /usr/sbin/lpadmin -p rwssl4 -E -v "ipp://209.119.222.222:631/?encryption=always
>> " -m raw
>>
>> On Apr 15, 2009, at 10:00 AM, James Chase wrote:
>>
>>> I'm trying to add a printer that uses SSL encryption. When I run
>>> this command I get the following error
>>>
>>> # /usr/sbin/lpadmin -p rwssl4 -E -v https://209.119.222.222:631 -m  
>>> raw
>>>
>>> lpadmin: Bad device-uri "https://209.119.188.226:631"!
>>>
>>> How can you setup a printer for communication over SSL if not by
>>> specifying https?
>>> _______________________________________________
>>> cups mailing list
>>> cups at easysw.com
>>> http://lists.easysw.com/mailman/listinfo/cups
>>
>> ____________________________________
>> Michael R Sweet, Senior Printing System Engineer
>>
>>
>>
>
> I get the following error on error_log on the CUPS server
>
> EncryptClient: error:1407609C:SSL  
> routines:SSL23_GET_CLIENT_HELLO:http request
>
> I have "Encryption Always" on the directive for the printer on the  
> CUPS Server, and on the CUPS client I added ?encryption=always as  
> you and the documentation make note of.
>
> Could this be indicative of no SSL support on my client CUPS? It  
> seems off that SSL would not be compiled into CUPS in the package  
> release (it is CentOS 5).
>
> Any ideas?
> _______________________________________________
> cups mailing list
> cups at easysw.com
> http://lists.easysw.com/mailman/listinfo/cups

________________________________________
Michael R Sweet, Senior Printing System Engineer

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cups.org/pipermail/cups/attachments/20090420/50faebc4/attachment-0001.html>