search

apple / cups

Apple CUPS Sources
https://www.cups.org
Apache License 2.0
1.85k stars 452 forks source link

PKI Invalid Cert error even after Allow Expired Certs set #6141

Open dealerv2 opened 9 months ago

dealerv2 commented 9 months ago

2023/08/09 Running Linux Mint 21.2 Cups package version 2.4.1 For the Xerox B210 printers I create manually using e.g. lpd, ipp, etc. the printing works OK. For the printers that are 'discovered' I get PKI Invalid Cert messages and they will not print. This occurs even though I have set the AllowExpiredCert option to 'true'. And I restart cups.service with systemctl. And the AllowExpiredCerts is set to true in the /etc/cups/printer.conf file. The previous version of Linux Mint worked. There is nothing in the /var/log/cups/error_log file that I can see. sudo cupsd -t gives this output:

sudo cupsd -t Unknown directive JobPrivateAccess on line 126 of /etc/cups/cupsd.conf. Unknown directive JobPrivateValues on line 127 of /etc/cups/cupsd.conf. Unknown directive SubscriptionPrivateAccess on line 128 of /etc/cups/cupsd.conf. Unknown directive SubscriptionPrivateValues on line 129 of /etc/cups/cupsd.conf. Printer drivers are deprecated and will stop working in a future version of CUPS. See https://github.com/OpenPrinting/cups/issues/103 "/etc/cups/cups-files.conf" is OK. "/etc/cups/cupsd.conf" is OK.

jph76 commented 8 months ago

I experienced the same issue – removing the printer certificate (trusted on first use) from /etc/cups/ssl worked for me.

DanSaintAndre commented 1 week ago

I have the same issue(s) running Mint 21.3 with Cinnamon and an HP 7740 Wide AIO. My disto has HPLIP v3.21.12 but the "latest edition" is v3.23.12, Sadly, the latest edition announces "Mint 21.3 not supported." When I try a manual install and build, there are many failed dependencies. I've several postings at

https://forums.linuxmint.com/viewtopic.php?t=417133 and https://forums.linuxmint.com/viewtopic.php?t=417194 and https://forums.linuxmint.com/viewtopic.php?t=419308

The printer works as expected when network connect to a Winows® 11 workstation and my Home-Ofice LAN. When connected to linux workstations by USB, things mostly work. (That is another topic.) When connected to linux by wire or wifi, I get the ERROR "cups-pki-invalid".

NOTE: I only started getting the cups error after I loaded a printer firmware update to "BUILD 2024-04-11" and version EDWINXPP1N002.2415C.00. Prior to this update, I got no error report beyond "... not connected" and "... not available"

COMMENTARY: I suspect that since Win11 works as expected, the hardware folks and the windows folks changed something and the rest of us are trailing behind. Since SSL is involved without CUPS, the windows folks might simply ignore certificates. I'm thinking out loud here. Likewise, since linux works with a USB connection and CUPS, I suspect that SSL is not involved with a "local printer." Lastly, I've read online that the cups-pki-invalid error affects printers from folks other than HP. As mentioned by JPH76, clearing /etc/cups/ssl offered a temporary solution but the problem returns with regularity.

Thanks in Advance,