]> git.ipfire.org Git - thirdparty/cups.git/commitdiff
Fix default TLS versions.
authorMichael R Sweet <michaelrsweet@gmail.com>
Tue, 19 Dec 2017 04:45:22 +0000 (23:45 -0500)
committerMichael R Sweet <michaelrsweet@gmail.com>
Tue, 19 Dec 2017 04:45:22 +0000 (23:45 -0500)
cups/usersys.c

index db15cd82a643f5f0e7224ecd33bf11e3640cea23..cf046ac911577647b43ba3bf50cc87a39cd119a7 100644 (file)
@@ -1160,11 +1160,13 @@ cups_init_client_conf(
 
   memset(cc, 0, sizeof(_cups_client_conf_t));
 
-  cc->encryption     = (http_encryption_t)-1;
-  cc->trust_first    = -1;
-  cc->any_root       = -1;
-  cc->expired_certs  = -1;
-  cc->validate_certs = -1;
+  cc->ssl_min_version = _HTTP_TLS_1_0;
+  cc->ssl_max_version = _HTTP_TLS_MAX;
+  cc->encryption      = (http_encryption_t)-1;
+  cc->trust_first     = -1;
+  cc->any_root        = -1;
+  cc->expired_certs   = -1;
+  cc->validate_certs  = -1;
 
  /*
   * Load settings from the org.cups.PrintingPrefs plist (which trump