From: Michael R Sweet <michaelrsweet@gmail.com>
Date: Tue, 19 Dec 2017 04:45:22 +0000 (-0500)
Subject: Fix default TLS versions.
X-Git-Tag: v2.3b1~6
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c88f441f945d8698fd0554a0077ba8c7662d80ef;p=thirdparty%2Fcups.git

Fix default TLS versions.
---

diff --git a/cups/usersys.c b/cups/usersys.c
index db15cd82a6..cf046ac911 100644
--- a/cups/usersys.c
+++ b/cups/usersys.c
@@ -1160,11 +1160,13 @@ cups_init_client_conf(
 
   memset(cc, 0, sizeof(_cups_client_conf_t));
 
-  cc->encryption     = (http_encryption_t)-1;
-  cc->trust_first    = -1;
-  cc->any_root       = -1;
-  cc->expired_certs  = -1;
-  cc->validate_certs = -1;
+  cc->ssl_min_version = _HTTP_TLS_1_0;
+  cc->ssl_max_version = _HTTP_TLS_MAX;
+  cc->encryption      = (http_encryption_t)-1;
+  cc->trust_first     = -1;
+  cc->any_root        = -1;
+  cc->expired_certs   = -1;
+  cc->validate_certs  = -1;
 
  /*
   * Load settings from the org.cups.PrintingPrefs plist (which trump