Bug 66341
| Summary: | cups ssl setup could be better (and default) | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Joshua Jensen <joshua> |
| Component: | cups | Assignee: | Tim Waugh <twaugh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | Keywords: | FutureFeature |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | F-8 | Doc Type: | Enhancement |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-02-27 11:49:24 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
CUPS is a beautiful thing. Making it even better is good too. You want cups to depend on httpd? Hmmm... you are right, we can't count on the certs to be there. I guess cups should just make it's own then. ping... ? Should we close this Tim? Er.. if you like, but SSL is not the default at the moment. Ok... but is it even a possibility? If not, please close the case... if so, any ETA on it? It would certainly be nice to have. ETA is very difficult to say, because this is a feature compared to all the bugs lying around, and so is quite low priority. I'll close it DEFERRED for the time being, because it certainly won't be in FC3. |
Description of Problem: 1) What could be better than a service that can use SSL? Answer: one that uses SSL by default. Why not make CUPS use HTTPS by default? 2) Also, as /etc/cups/ssl/{server.crt,server.key} is mentioned in cupsd.conf, shouldn't /etc/cups/ssl at least exist? Once it exists, why not issue in the rpm's %postinstall script: ln -s /etc/httpd/conf/ssl.crt/server.crt /etc/cups/ssl/server.crt ln -s /etc/httpd/conf/ssl.key/server.key /etc/cups/ssl/server.key Perhaps in the next version of RHL, one or both of these small changes could be made. Thank you, Joshua