Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 137444 - cups seems to be broken with ssl/gnutls
Summary: cups seems to be broken with ssl/gnutls
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Printing (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Printing Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-06-20 16:34 UTC by Philipp Rosenberger
Modified: 2006-06-22 10:55 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Rosenberger 2006-06-20 16:34:40 UTC
net-print/cups-1.2.1-r1  USE="gnutls jpeg pam png samba ssl tiff -dbus -nls -slp"

every time when i attempted to access the cups-webinterface (only https, not http) from e remote host cups hangs.

/var/log/cups/error_log:
D [21/Jun/2006:01:12:24 +0200] cupsdAcceptClient: 6 from 192.168.0.2:631 (IPv4)
I [21/Jun/2006:01:12:24 +0200] Generating server key...

when i googled for this i found this:
https://launchpad.net/distros/ubuntu/dapper/+source/cupsys/+bug/44931

cups with -gnutls -ssl works perfect

Portage 2.1 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r4, 2.6.16.20-server i686)
=================================================================
System uname: 2.6.16.20-server i686 AMD Athlon(tm) 64 Processor 3200+
Gentoo Base System version 1.6.14
ccache version 2.3 [enabled]
dev-lang/python:     2.4.2
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r2
sys-devel/gcc-config: 1.3.13-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i586-pc-linux-gnu"
CFLAGS="-mtune=k6-2 -O2 -pipe -fomit-frame-pointer"
CHOST="i586-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/terminfo"
CXXFLAGS="-mtune=k6-2 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ "
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 3dnow 3dnowext 7zip aalib activefilter adsl apache2 authfile bzip2 ccache chroot crypt cups curl curlwrappers expat extensions fontconfig foomaticdb gd gdbm geoip gimpprint gnutls gzip hpn http httpd idn iproute2 javascript jpeg kerberos libg++ libwww lpr md5sum mmx multiuser ncurses nfs no-old-linux nodrm nonfsv4 nptl nptlonly ocaml pam png posix ppds python rar readline reiserfs samba screen session shaper snmp soap socks5 softquota ssl startup-notification subversion suid swat sysfs syslog tcpd threads tidy tiff truetype udev usb userlocales vim vim-pager xml xml2 zip zlib zvbi elibc_glibc kernel_linux userland_GNU"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Comment 1 Joe Kappus 2006-06-21 15:36:17 UTC
I'll back it up too that there are definetly problems with ssl and cups-1.2.1.  For me any of the pages requiring encryption (it was set for anything in /admin), Firefox would report that it couldn't handle the encryption algorithm.  

Additionally, this was the error, server side when this happened, from /var/log/cups/error_log.

E [21/Jun/2006:17:27:23 -0400] encrypt_client: Unable to encrypt connection from 192.168.0.102!
E [21/Jun/2006:17:27:23 -0400] encrypt_client: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

Dropping ssl outta the USE flags was what caused me to get it 1.2.1 working as well.
Comment 2 Stefan Schweizer (RETIRED) gentoo-dev 2006-06-22 00:07:53 UTC
I have reportet this bug upstream:
http://cups.org/str.php?L1788+P0+S-2+C0+I0+E0+Q

I will wait for their fix until I make a revision bump, for now I have just fixed it in the current revision.

Thank you for this bugreport and the fix :)
Comment 3 Stefan Schweizer (RETIRED) gentoo-dev 2006-06-22 10:55:26 UTC
I have revision bumped it and upstream has replied on the bug, thank you all