Ensure that strong algorithms are used for TLS certificates.

TinggiLevel 1Tinjauan manualwebsphere

Deskripsi

Certificates created with stronger algorithms use stronger hashes which is more secure. Also, some browsers warn when using weak certificates. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Ensure that Signature algorithm name is SHA256 or higher and Subject Public Key Algorithm is equal or higher than 2048 bit. keytool -list -v -keystore <keystore file name> -storepass <store password> - storetype <store type> | grep 'Signature algorithm name\|Subject Public Key Algorithm' ... Signature algorithm name: SHA256withRSA Subject Public Key Algorithm: 2048-bit RSA key ...

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Create certificates with SHA256 or higher algorithm and 2048 or higher key bit size.

Properti

Sistem operasi: Apa saja
Tag: webspheremanual-review
Referensi: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 4.2.11 Ensure that strong algorithms are used for TLS certificates.