Ask Your Question
1

Howto encrypt print data from a CUPS server to a TLS enabled printer

asked 2015-04-02 16:39:12 -0500

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

I have an application where I need to encrypt ALL print jobs originating from the CUPS print server, all the way to the destination printer.

Note that I already found and documented the process of encrypting all traffic between 2 CUPS print servers.

But, I need to encrypt from the originating CUPS server, and decrypt at the destination printer.

I found several printers that are capable of decrypting the print job when it arrives, but I have not been able to find one "good" document, that tells how to encrypt all outbound print jobs, originating from the CUPS print server.

If anyone can either point me to a good document(s), with examples, that shows / describes in detail, how to configure the originating CUPS print server, so that it sends all print jobs using TLS, or IPSec, I would much appreciate it.

Thanks in advance,

jxfish2

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
3

answered 2015-04-02 21:05:56 -0500

You should be able to accomplish this by adding the "encryption=always" option in the syntax of your IPP URL: http://www.cups.org/documentation.php...

Does that not work for you?

edit flag offensive delete link more
0

answered 2015-04-06 08:01:13 -0500

jxfish2 gravatar image

Thanks for your help.

The answer you provided was much simpler than I expected. )))

I successfully tested end to end, using Wireshark to verify the encrypted transmission...

The answer is to simply merge your server.crt and server.key files into one server.pem file, then upload the server.pem file to the destination printer. (Note that this method is used to enable TLS encryption)

Then when you create your printer, use the "encryption=required" for TLS printing. ("encryption=always" is used for SSL printing.)

Works like a charm.

Note that the printers I chose to use are the Lexmark 410 series, as they have the lowest price point of any low end, commercial grade, workgroup printers... And, for the price, they had the best specs also...

The 410 series printers are SSL, TLS and IPSec capable...

Having said that, I was not able to figure out how to use the IPSec capabilities... But, the SSL and TLS are both working as intended... (Once I got the TLS working, I really did not spend any more time on the IPSec.)

Thanks again for your help, and have a great week.

JCF

edit flag offensive delete link more

Comments

1

Sure thing - actually, if you could accept my answer as correct and repost this as a comment to the answer, that'd be the correct way to interact with the forum.

bitwiseoperator gravatar imagebitwiseoperator ( 2015-04-06 10:13:02 -0500 )edit

Question Tools

1 follower

Stats

Asked: 2015-04-02 16:39:12 -0500

Seen: 1,834 times

Last updated: Apr 06 '15