--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cupsys: no ssl certificate is generated, thus remote web admin is impossible (426 Upgrade Required)
- From: Sebastien Barthelemy <sebastien.barthelemy@libertysurf.fr>
- Date: Sat, 09 Dec 2006 22:58:04 +0100
- Message-id: <20061209215804.7821.52016.reportbug@shoebox.respeer.net>
Package: cupsys
Version: 1.2.7-1
Severity: normal
After setting up cupsd to allow remote access to the web ui. The web
ui works but several actions end up with this message:
426 Upgrade Required
You must access this page using the URL https://192.168.10.1:631/admin.
It seems the web ui requires ssl acces, but cannot find a
certificat. Generating one actually solves the problem
(cfr. http://forums.gentoo.org/viewtopic.php?t=480166)
openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
-out /etc/cups/ssl/server.crt -days 365 -nodes
(choising 192.168.10.1 as common name)
I guess this should be fixed in debian or at least explained in the
documentation (I found nothing about it)
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-486
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Versions of packages cupsys depends on:
ii adduser 3.100 Add and remove users and groups
ii cupsys-common 1.2.7-1 Common UNIX Printing System(tm) -
ii debconf [debconf-2.0] 1.5.8 Debian configuration management sy
ii gs-esp 8.15.3.dfsg.1-1 The Ghostscript PostScript interpr
ii libc6 2.3.6.ds1-8 GNU C Library: Shared libraries
ii libcupsimage2 1.2.7-1 Common UNIX Printing System(tm) -
ii libcupsys2 1.2.7-1 Common UNIX Printing System(tm) -
ii libdbus-1-3 1.0.1-2 simple interprocess messaging syst
ii libgnutls13 1.4.4-2 the GNU TLS library - runtime libr
ii libldap2 2.1.30-13+b1 OpenLDAP libraries
ii libpam0g 0.79-4 Pluggable Authentication Modules l
ii libpaper1 1.1.21 Library for handling paper charact
ii libslp1 1.2.1-6 OpenSLP libraries
ii lsb-base 3.1-22 Linux Standard Base 3.1 init scrip
ii patch 2.5.9-4 Apply a diff file to an original
ii perl-modules 5.8.8-6.1 Core Perl modules
ii procps 1:3.2.7-3 /proc file system utilities
ii xpdf-utils [poppler-util 3.01-9 Portable Document Format (PDF) sui
ii zlib1g 1:1.2.3-13 compression library - runtime
Versions of packages cupsys recommends:
ii cupsys-client 1.2.7-1 Common UNIX Printing System(tm) -
ii foomatic-filters 3.0.2-20061031-1 linuxprinting.org printer support
ii smbclient 3.0.23d-1 a LanManager-like simple client fo
-- debconf information:
cupsys/raw-print: true
cupsys/backend: ipp, lpd, parallel, socket, usb
--- End Message ---
--- Begin Message ---
Source: cupsys
Source-Version: 1.2.12-2
We believe that the bug you reported is fixed in the latest version of
cupsys, which is due to be installed in the Debian FTP archive:
cupsys-bsd_1.2.12-2_i386.deb
to pool/main/c/cupsys/cupsys-bsd_1.2.12-2_i386.deb
cupsys-client_1.2.12-2_i386.deb
to pool/main/c/cupsys/cupsys-client_1.2.12-2_i386.deb
cupsys-common_1.2.12-2_all.deb
to pool/main/c/cupsys/cupsys-common_1.2.12-2_all.deb
cupsys-dbg_1.2.12-2_i386.deb
to pool/main/c/cupsys/cupsys-dbg_1.2.12-2_i386.deb
cupsys_1.2.12-2.diff.gz
to pool/main/c/cupsys/cupsys_1.2.12-2.diff.gz
cupsys_1.2.12-2.dsc
to pool/main/c/cupsys/cupsys_1.2.12-2.dsc
cupsys_1.2.12-2_i386.deb
to pool/main/c/cupsys/cupsys_1.2.12-2_i386.deb
libcupsimage2-dev_1.2.12-2_i386.deb
to pool/main/c/cupsys/libcupsimage2-dev_1.2.12-2_i386.deb
libcupsimage2_1.2.12-2_i386.deb
to pool/main/c/cupsys/libcupsimage2_1.2.12-2_i386.deb
libcupsys2-dev_1.2.12-2_i386.deb
to pool/main/c/cupsys/libcupsys2-dev_1.2.12-2_i386.deb
libcupsys2_1.2.12-2_i386.deb
to pool/main/c/cupsys/libcupsys2_1.2.12-2_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 402370@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Martin Pitt <mpitt@debian.org> (supplier of updated cupsys package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 06 Aug 2007 15:47:33 +0200
Source: cupsys
Binary: libcupsys2-dev cupsys libcupsys2 libcupsimage2 cupsys-common cupsys-client cupsys-dbg cupsys-bsd libcupsimage2-dev
Architecture: source i386 all
Version: 1.2.12-2
Distribution: unstable
Urgency: low
Maintainer: Debian CUPS Maintainers <pkg-cups-devel@lists.alioth.debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description:
cupsys - Common UNIX Printing System(tm) - server
cupsys-bsd - Common UNIX Printing System(tm) - BSD commands
cupsys-client - Common UNIX Printing System(tm) - client programs (SysV)
cupsys-common - Common UNIX Printing System(tm) - common files
cupsys-dbg - Common UNIX Printing System(tm) - debugging symbols
libcupsimage2 - Common UNIX Printing System(tm) - image libs
libcupsimage2-dev - Common UNIX Printing System(tm) - image development files
libcupsys2 - Common UNIX Printing System(tm) - libs
libcupsys2-dev - Common UNIX Printing System(tm) - development files
Closes: 193076 402370 415684 425701 426521
Changes:
cupsys (1.2.12-2) unstable; urgency=low
.
[ Kenshi Muto ]
* Added scripting directory to /usr/share/doc/cupsys/examples.
This directory contains the binding code from Java, Perl, and PHP
to CUPS. (closes: #193076)
Although we Debian CUPS team cannot afford to maintain them,
some of you may want them.
* Added 'Recommends: cupsys' to cupsys-bsd. (closes: #426521)
* Changed cupsys-client from 'Recommends: cupsys-bsd' to 'Suggests:
cupsys-bsd.' because cupsys-bsd isn't so necessary for cupsys-client.
* Fixed to use 'cupsys' instead of 'cups' for PAM on cups-check-pam-auth.
(though Debian CUPS doesn't use this daemon) (closes: #425701)
* Added debconf-2.0 to the dependency of cupsys-bsd. (closes: #415684)
.
[ Martin Pitt ]
* Drop the derooting changes. It still has some regressions, and with
upstream not even acknowledging the need for improving cupsys' security we
will sit on this forever. This will be replaced by an AppArmor/SELinux
profiles in the future.
- Drop derooting related patches:
06_disable_backend_setuid.dpatch
10_external_pam_helper.dpatch
09_runasuser.dpatch
09_runasuser_autoconf.dpatch
- debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file
permission juggling.
- debian/rules:
+ Drop --with-cups-user configure option.
+ Do not modify the upstream default backend permissions.
- debian/cupsys.init.d: Do not touch log file permissions any more.
- debian/cupsys.files: Drop cups-check-pam-auth.
- debian/NEWS: Drop description of derooting changes.
- debian/control: Drop adduser dependency.
* debian/patches/44_fixconfdirperms.dpatch: Do not create
/var/run/cups/certs as lp:lpadmin, but as root:lpadmin, so that cupsd
does not need CAP_DAC_OVERRIDE. This will make it possible to create a
sensible AppArmor/SELinux profile.
* debian/cupsys.preinst: Fix file permissions on upgrades (owner cupsys ->
root).
* debian/control, debian/rules: Remove references to libcupsys2-gnutls10,
since it's a transitional package in Etch and not relevant any more in
Lenny.
* debian/cupsys.{pre,post}inst: Remove obsolete transition bits.
* Remove obsolete debian/patches/05_avoidunknowngroup.dpatch.
* Use ssl-cert's "snakeoil" SSL certificate by default: (Closes: #402370)
- debian/control: Add ssl-cert dependency.
- debian/cupsys.postinst: Symlink snakeoil SSL certificate if present, and
there is none present yet.
* debian/control: Replace obsolete ${Source-Version} with ${binary:Version}.
.
[ Till Kamppeter ]
* Add debian/local/textonly.{ppd,filter}: Text-only printer driver from Red
Hat. Install it in debian/rules.
* debian/rules: Install the D-Bus config file so that CUPS reports
job progress to dbus clients (like sytem-config-printer).
* Add debian/local/oopstops.{.pl,types,convs}: Helge Bliscke's oopstops
filter to work around the bugs in the PostScript output of OpenOffice.org
(from http://www.srz.de/Members/bla/cups/filter/oopstops). Install them in
debian/rules.
Files:
bc465920c1a60e45cfe608f72e31c23a 1087 net optional cupsys_1.2.12-2.dsc
056b4baac9cb1a4fe1a929207f7ccbfe 97823 net optional cupsys_1.2.12-2.diff.gz
40551844936496d477033f4ad28b774c 936254 net optional cupsys-common_1.2.12-2_all.deb
fbd369741eb2db8af5db7d92e35a4b6c 167082 libs optional libcupsys2_1.2.12-2_i386.deb
e8f394073bd1c9a8e593c22c71dfa21a 93576 libs optional libcupsimage2_1.2.12-2_i386.deb
b5a249a7a094a27b0e81d4d3651d034e 1871846 net optional cupsys_1.2.12-2_i386.deb
92b05e1a6c215d5b5053e9cd93bda8f7 81578 net optional cupsys-client_1.2.12-2_i386.deb
89b0369788fc960fdba6dc811d363704 137754 libdevel optional libcupsys2-dev_1.2.12-2_i386.deb
72c2dbb59432f6cbebb0e5bcb11ea628 54884 libdevel optional libcupsimage2-dev_1.2.12-2_i386.deb
32d528d1a3fc246f7fa29a5cba94ea25 36804 net extra cupsys-bsd_1.2.12-2_i386.deb
939a108cfe31e97058bf0a01a2d83c42 991202 libdevel extra cupsys-dbg_1.2.12-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGtyrVDecnbV4Fd/IRAkpUAKDGSHFaqkBxadAKMcj5lIEZ1bNq5QCghJXy
Wba8U3PJRo2vZL+6ShS7+R8=
=ku2o
-----END PGP SIGNATURE-----
--- End Message ---