[cups-devel] [HIGH] STR #4476: CUPS needs a way to control the use of cipher suites and protocol versions

[Tim Waugh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR Resolved]

Shouldn't the "Upgrade" HTTP field contain "SSL/3.0" if
_HTTP_TLS_ALLOW_SSL3 is set in tls_options? In which case, scheduler/conf.c
will need to call _httpTLSSetOptions() to tell it what SSLOptions is, and
we'll need to ensure _HTTP_TLS_ALLOW_SSL3==CUPSD_SSL_ALLOW_SSL3.

Link: https://www.cups.org/str.php?L4476
Version: 1.4.2
Fix Version: 2.1-current (r12215)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=MyCI
-----END PGP SIGNATURE-----