TMA-APACHE-7.1
Ensure mod_ssl and/or mod_nss Is Installed
AltaNivel 1Automatizadaapache
Descripción
Secure Sockets Layer (SSL) was developed by Netscape and turned into an open standard and was renamed Transport Layer Security (TLS) as part of the process. TLS is important for protecting communication and can provide authentication of the server and even the client. Compliant when ssl_module or nss_module is loaded. Uses the module list from apachectl -M (apache2ctl/httpd; needs root).
Cómo se verifica
Método de auditoría: Comando de shell
shell
b=$(command -v apache2ctl || command -v apachectl || command -v httpd) || exit 1; m=$("$b" ${APACHE_CONF:+-f "$APACHE_CONF"} -M 2>/dev/null) || exit 1; printf '%s\n' "$m" | grep -Eiq '(ssl|nss)_module' && echo compliant || echo noncompliant- Salida esperada
compliant
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Install mod_ssl (dnf install mod_ssl; a2enmod ssl on Debian/Ubuntu). Then run apachectl configtest and reload Apache.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- apachetls
- Referencia
- CIS Apache HTTP Server 2.4 Benchmark v2.4.0 - 7.1 Ensure mod_ssl and/or mod_nss Is Installed
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
shell
tmaegis scan --target apache