Ensure a trusted certificate and trust chain is installed

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Run this command to find the file location of your certificate: grep -ir ssl_certificate /etc/nginx/ The output of your command should look similar to the below output. If there is no output, you do not have a certificate installed. Web Server: /etc/nginx/nginx.conf: ssl_certificate /etc/nginx/cert.pem; /etc/nginx/nginx.conf: ssl_certificate_key /etc/nginx/nginx.key; Open the file to the right of the ssl_certificate directive using the following command: cat /etc/nginx/cert.pem The output of your command should look similar to the below. It should include the full certificate chain.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Use the following procedure to install a certificate and its signing certificate chain onto your web server, load balancer, or proxy. Step 1: Create the server's private key and a certificate signing request. The following command will create your certificate's private key with 4096-bit key strength. It will also output your certificate signing request to the nginx.csr file in your present working directory. openssl req -new -newkey rsa:4096 -keyout nginx.key -out nginx.csr Enter the below information about your private key: Country Name (2 letter code) [XX]: Your Country State or Province Name (full name) []: Your State Locality Name (eg, city) [Default City]: Your City Organization Name (eg, company) [Default Company Ltd]: Your City Organizational Unit Name (eg, section) []: Your Organizational Unit Common Name (eg, your name or your server's hostname) [] ...