<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">You can't set "Encryption Always" on the server, since the Encryption directive is only valid for locations and policies. Use SSLPort or SSLListen for that.<div><br></div><div>That said, for any recent CUPS release, the auto-SSL code should pick up on the SSL encryption from the client end without problems.</div><div><br></div><div>CENTOS does ship with SSL support (via OpenSSL), so either you don't have a valid SSL certificate for CUPS setup (it should create a certificate and private key automatically, but if an invalid one is supplied it will spit out an error...) or the client-side is not configured properly.</div><div><br></div><div>If you *are* printing to another CUPS server, the URI you are providing is invalid. The correct URI format for a SSL connection is:</div><div><br></div><div> <a href="ipp://host-or-ip:port/printers/printername?encryption=always">ipp://host-or-ip:port/printers/printername?encryption=always</a></div><div><br></div><div>Alternately you can use "encryption=required" to do the HTTP Upgrade thing.</div><div><br></div><div><br></div><div><div><div><div>On Apr 19, 2009, at 7:53 PM, James Chase wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><blockquote type="cite">See the documentation at:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"> <a href="http://www.cups.org/documentation.php/network.html">http://www.cups.org/documentation.php/network.html</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Basically, add "?encryption=always" to the end of an IPP URI, e.g.:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"> /usr/sbin/lpadmin -p rwssl4 -E -v "<a href="ipp://209.119.222.222:631/?encryption=always">ipp://209.119.222.222:631/?encryption=always</a><br></blockquote><blockquote type="cite">" -m raw<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">On Apr 15, 2009, at 10:00 AM, James Chase wrote:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite">I'm trying to add a printer that uses SSL encryption. When I run<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">this command I get the following error<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"># /usr/sbin/lpadmin -p rwssl4 -E -v <a href="https://209.119.222.222:631">https://209.119.222.222:631</a> -m raw<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">lpadmin: Bad device-uri "<a href="https://209.119.188.226:631">https://209.119.188.226:631</a>"!<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">How can you setup a printer for communication over SSL if not by<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">specifying https?<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">_______________________________________________<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">cups mailing list<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><a href="mailto:cups@easysw.com">cups@easysw.com</a><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><a href="http://lists.easysw.com/mailman/listinfo/cups">http://lists.easysw..com/mailman/listinfo/cups</a><br></blockquote></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">____________________________________<br></blockquote><blockquote type="cite">Michael R Sweet, Senior Printing System Engineer<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><br>I get the following error on error_log on the CUPS server<br><br>EncryptClient: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request<br><br>I have "Encryption Always" on the directive for the printer on the CUPS Server, and on the CUPS client I added ?encryption=always as you and the documentation make note of.<br><br>Could this be indicative of no SSL support on my client CUPS? It seems off that SSL would not be compiled into CUPS in the package release (it is CentOS 5).<br><br>Any ideas?<br>_______________________________________________<br>cups mailing list<br><a href="mailto:cups@easysw.com">cups@easysw.com</a><br><a href="http://lists.easysw.com/mailman/listinfo/cups">http://lists.easysw..com/mailman/listinfo/cups</a><br></div></blockquote></div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Monaco; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>________________________________________</div><div>Michael R Sweet, Senior Printing System Engineer</div></div></div></span></span>
</div>
<br></div></div></body></html>