]>
Commit | Line | Data |
---|---|---|
b423cd4c | 1 | .\" |
e4e5666b | 2 | .\" "$Id$" |
b423cd4c | 3 | .\" |
7131e285 | 4 | .\" client.conf man page for CUPS. |
b423cd4c | 5 | .\" |
ee6226a5 | 6 | .\" Copyright 2007-2015 by Apple Inc. |
7131e285 | 7 | .\" Copyright 2006 by Easy Software Products. |
b423cd4c | 8 | .\" |
7131e285 MS |
9 | .\" These coded instructions, statements, and computer programs are the |
10 | .\" property of Apple Inc. and are protected by Federal copyright | |
11 | .\" law. Distribution and use rights are outlined in the file "LICENSE.txt" | |
12 | .\" which should have been included with this file. If this file is | |
13 | .\" file is missing or damaged, see the license at "http://www.cups.org/". | |
b423cd4c | 14 | .\" |
ee6226a5 | 15 | .TH client.conf 5 "CUPS" "19 May 2015" "Apple Inc." |
b423cd4c | 16 | .SH NAME |
7131e285 | 17 | client.conf \- client configuration file for cups (deprecated) |
b423cd4c | 18 | .SH DESCRIPTION |
7131e285 MS |
19 | The \fBclient.conf\fR file configures the CUPS client and is normally located in the \fI/etc/cups\fR and/or \fI~/.cups\fR directories. |
20 | Each line in the file can be a configuration directive, a blank line, or a comment. Comment lines start with the # character. | |
21 | .LP | |
ee6226a5 | 22 | \fBNote:\fR Starting with OS X 10.7, this file is only used by command-line and X11 applications plus the IPP backend. |
7131e285 MS |
23 | The \fBServerName\fR directive is not supported on OS X at all. |
24 | .SS DIRECTIVES | |
25 | The following directives are understood by the client. Consult the online help for detailed descriptions: | |
b423cd4c | 26 | .TP 5 |
f51f3773 | 27 | \fBAllowAnyRoot Yes\fR |
f9988e18 | 28 | .TP 5 |
f51f3773 | 29 | \fBAllowAnyRoot No\fR |
f9988e18 | 30 | Specifies whether to allow TLS with certificates that have not been signed by a trusted Certificate Authority. |
f51f3773 | 31 | The default is "Yes". |
f9988e18 | 32 | .TP 5 |
f51f3773 | 33 | \fBAllowExpiredCerts Yes\fR |
f9988e18 | 34 | .TP 5 |
f51f3773 | 35 | \fBAllowExpiredCerts No\fR |
f9988e18 | 36 | Specifies whether to allow TLS with expired certificates. |
f51f3773 | 37 | The default is "Yes". |
f9988e18 | 38 | .TP 5 |
7131e285 | 39 | \fBEncryption IfRequested\fR |
b423cd4c | 40 | .TP 5 |
7131e285 | 41 | \fBEncryption Never\fR |
b423cd4c | 42 | .TP 5 |
7131e285 MS |
43 | \fBEncryption Required\fR |
44 | Specifies the level of encryption that should be used. | |
b423cd4c | 45 | .TP 5 |
7131e285 MS |
46 | \fBGSSServiceName \fIname\fR |
47 | Specifies the Kerberos service name that is used for authentication, typically "host", "http", or "ipp". | |
48 | CUPS adds the remote hostname ("name@server.example.com") for you. The default name is "http". | |
07ed0e9a | 49 | .TP 5 |
7131e285 | 50 | \fBServerName \fIhostname-or-ip-address\fR[\fI:port\fR] |
b423cd4c | 51 | .TP 5 |
7131e285 MS |
52 | \fBServerName \fI/domain/socket\fR |
53 | Specifies the address and optionally the port to use when connecting to the server. | |
54 | \fBNote: This directive it not supported on OS X 10.7 or later.\fR | |
3e7fe0ca | 55 | .TP 5 |
7131e285 MS |
56 | \fBServerName \fIhostname-or-ip-address\fR[\fI:port\fR]\fB/version=1.1\fR |
57 | Specifies the address and optionally the port to use when connecting to a server running CUPS 1.3.12 and earlier. | |
3699c637 | 58 | .TP 5 |
ee6226a5 | 59 | \fBSSLOptions \fR[\fIAllowDH\fR] [\fIAllowRC4\fR] [\fIAllowSSL3\fR] [\fIDenyTLS1.0\fR] |
63aefcd5 MS |
60 | .TP 5 |
61 | \fBSSLOptions None\fR | |
62 | Sets encryption options (only in /etc/cups/client.conf). | |
63 | By default, CUPS only supports encryption using TLS v1.0 or higher using known secure cipher suites. | |
ee6226a5 | 64 | The \fIAllowDH\fR option enables cipher suites using plain Diffie-Hellman key negotiation. |
63aefcd5 MS |
65 | The \fIAllowRC4\fR option enables the 128-bit RC4 cipher suites, which are required for some older clients that do not implement newer ones. |
66 | The \fIAllowSSL3\fR option enables SSL v3.0, which is required for some older clients that do not support TLS v1.0. | |
ee6226a5 | 67 | The \fIDenyTLS1.0\fR option disables TLS v1.0 support - this sets the minimum protocol version to TLS v1.1. |
63aefcd5 | 68 | .TP 5 |
7131e285 | 69 | \fBUser \fIname\fR |
3e7fe0ca | 70 | Specifies the default user name to use for requests. |
f51f3773 MS |
71 | .TP 5 |
72 | \fBValidateCerts Yes\fR | |
73 | .TP 5 | |
74 | \fBValidateCerts No\fR | |
75 | Specifies whether to only allow TLS with certificates whose common name matches the hostname. | |
76 | The default is "No". | |
7131e285 MS |
77 | .SH NOTES |
78 | The \fBclient.conf\fR file is deprecated and will no longer be supported in a future version of CUPS. | |
b423cd4c | 79 | .SH SEE ALSO |
7131e285 MS |
80 | .BR cups (1), |
81 | CUPS Online Help (http://localhost:631/help) | |
b423cd4c | 82 | .SH COPYRIGHT |
ee6226a5 | 83 | Copyright \[co] 2007-2015 by Apple Inc. |
b423cd4c | 84 | .\" |
e4e5666b | 85 | .\" End of "$Id$". |
b423cd4c | 86 | .\" |