Printing fails silently, and "cups-pki-invalid" error is hidden.

Error in cups log (but not shown as a popup unless I missed it), and the printer tray icon offers no way to solve the issue. It just doesn't print (silent failure).

Here are the full details: https://github.com/OpenPrinting/cups/issues/1072

michaelrsweet from CUPS says it should be handled by the GUI code:

What needs to happen is the desktop software should display this alert with an option for resetting (deleting) the certificate. That is outside the scope of this project. Ordinarily the certificate should not change for a while (default on most printers is 10 years for their self-signed certs).

Disabling the PKI check disables an important security check. . .

-michaelrsweet https://github.com/OpenPrinting/cups/issues/1072#issuecomment-2393434856

@sample What matters is the certificate the printer is currently using. I've noticed that some printers (incorrectly) generate a new self-signed certificate after a firmware update. They can also do this if their hostname changes.

. . .

-michaelrsweet https://github.com/OpenPrinting/cups/issues/1072#issuecomment-2393543651

Start with the linked CUPS issue and its cited comments, then inspect how the desktop printer tray handles CUPS errors. Done means displaying the certificate error with an option to reset or delete the certificate, without disabling the PKI check.