The `SSLOptions` directive in "client.conf" and "cupsd.conf" now supports `DenyCBC...

[thirdparty/cups.git] / cups / usersys.c

diff --git a/cups/usersys.c b/cups/usersys.c
index 88cccfa238fa9a780d27fac5e06f531699e846a5..ff5cb30837d1edcd2b05871b48d6c363777b6c1c 100644 (file)
--- a/cups/usersys.c
+++ b/cups/usersys.c
@@ -1367,6 +1367,8 @@ cups_set_ssl_options(
       options |= _HTTP_TLS_ALLOW_SSL3;
     else if (!_cups_strcasecmp(start, "AllowDH"))
       options |= _HTTP_TLS_ALLOW_DH;
+    else if (!_cups_strcasecmp(start, "DenyCBC"))
+      options |= _HTTP_TLS_DENY_CBC;
     else if (!_cups_strcasecmp(start, "DenyTLS1.0"))
       options |= _HTTP_TLS_DENY_TLS10;
     else if (!_cups_strcasecmp(start, "None"))