Prev · NextSTR #4039: Support intermediate certificate authority file

Status:4 - Pending
Priority:1 - Request for Enhancement, e.g. asking for a feature
Scope:3 - Applies to all machines and operating systems
Subsystem:Scheduler
Summary:Support intermediate certificate authority file
Version: -feature
Created By:relovett
Assigned To:mike
Fix Version:Unassigned
Update Notification:

Receive EMails Don't Receive EMails

Trouble Report Files:

No files

Trouble Report Dialog:

Name/Time/Date/Text
relovett: 10:01 Mar 08, 2012
 
From http://www.cups.org/newsgroups.php?s8+gcups.general+v26+T0+Qcertificate

We were issued a certificate from an InCommon-Comodo service. It is a valid SSL certificate but we need to be able to tell CUPS to look at the intermediate certificates. This is along the lines of apache's SSLCertificateChainFile option.
 
MrManor: 09:18 Mar 27, 2012
 
As a workaround you can concatenate the certificates to one file and use that. What you need to do is something like:
cat server.crt > /etc/cups/ssl/server.crt
cat intermediate.crt >> /etc/cups/ssl/server.crt
cat server.key > /etc/cups/ssl/server.key

Only done a brief test, but it seems to work ;-)
 
relovett: 09:45 Mar 27, 2012
 
Confirmed, that does work. Thanks for the tip Klaus!
 
mike: 07:59 Nov 06, 2012
 
Moving out a bit due to schedule; we plan on revamping a lot of the SSL support in future releases so this will get picked up when that happens.