With GNU TLS, generated certificates were incorrectly placed in $HOME for the

root UID.  They should be in /etc/cups (ServerRoot).

diff --git a/CHANGES-OPENPRINTING.md b/CHANGES-OPENPRINTING.md
index 25904fe3309009e9800bbd851b140dd9e014b657..f245d74283611e7e7ff06cb4e6a63a4c2e1e4b62 100644 (file)
--- a/CHANGES-OPENPRINTING.md
+++ b/CHANGES-OPENPRINTING.md
@@ -8,6 +8,7 @@ Changes in CUPS v2.3.3op2
 - Fixed duplicate ColorModel entries for AirPrint printers (Issue 59)
 - Fixed directory/permission defaults for Debian kfreebsd-based systems
   (Issue #60, Issue #61)
+- Root certificates were incorrectly stored in "~/.cups/ssl".
 
 
 Changes in CUPS v2.3.3op1

diff --git a/cups/tls-gnutls.c b/cups/tls-gnutls.c
index 329cc0eb42e4183f9efd1615111f4c417379bf95..4850383e10a38a04ec911f7a5974adc722c21e7d 100644 (file)
--- a/cups/tls-gnutls.c
+++ b/cups/tls-gnutls.c
@@ -1,6 +1,7 @@
 /*
  * TLS support code for CUPS using GNU TLS.
  *
+ * Copyright © 2020 by Michael R Sweet
  * Copyright © 2007-2019 by Apple Inc.
  * Copyright © 1997-2007 by Easy Software Products, all rights reserved.
  *
@@ -939,7 +940,7 @@ http_gnutls_default_path(char   *buffer,/* I - Path buffer */
                                        /* Pointer to library globals */
 
 
-  if (cg->home)
+  if (cg->home && getuid())
   {
     snprintf(buffer, bufsize, "%s/.cups", cg->home);
     if (access(buffer, 0))