Server seemingly randomly chooses between multiple certificates for IPPS

未关闭
#27 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

评估

难度
4/5
预计耗时
3-5 天
新手友好度
35/100
Issue 类型
缺陷
描述清晰度
需要澄清
活跃度
活跃

调研方向

通过从 CUPS 发送连续的 IPPS 作业来重现问题,并检查 /var/snap/ghostscript-printer-app/common/cups/ssl,包括三个报告名称对应的证书和密钥。比较服务器在每次连接中提供的证书,并确定预期的证书选择行为。当连续作业之间的证书选择不再出现意外的不一致时,即表示完成。

由索引模型根据 Issue 内容生成。

描述

When printing to a ghostscript-printer-app server via IPPS from CUPS, the server seems to use one of three common names for the certificate:

  • The mDNS hostname (print.local)
  • The DNS hostname (print.intra.my.domain)
  • The IPv6 ULA (fd11:367d:c329:80:****:**ff:fe**:****)
    It seems to choose randomly between the three, even for jobs sent from the same client shortly after each other. /var/snap/ghostscript-printer-app/common/cups/ssl contains different certificates and keys for all three; even after deleting these, it still seems to choose one of the three hostnames at random and generates new certificates as they are used.

This means that only the first print job from each client will reliably work - on subsequent jobs, if a different certificate is sent, the client won't trust the certificate as it is different from the one sent with the first job.

I have worked around this by manually issuing a single certificate that is valid for all three hostnames and symlinking it to all three hostnames in /var/snap/ghostscript-printer-app/common/cups/ssl, but this surely isn't intended behaviour.

主要语言
PostScript
星标
44
派生
16
PR 合并指标
30 天内没有已合并 PR

贡献指南

这个仓库没有索引到贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

OpenPrinting/ghostscript-printer-app 的其他 Issue

查看 OpenPrinting/ghostscript-printer-app 的全部 Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。