TMA-APACHE-7.1

Ensure mod_ssl and/or mod_nss Is Installed

높음레벨 1자동apache

설명

Secure Sockets Layer (SSL) was developed by Netscape and turned into an open standard and was renamed Transport Layer Security (TLS) as part of the process. TLS is important for protecting communication and can provide authentication of the server and even the client. Compliant when ssl_module or nss_module is loaded. Uses the module list from apachectl -M (apache2ctl/httpd; needs root).

점검 방법

감사 방식: 셸 명령

shell

b=$(command -v apache2ctl || command -v apachectl || command -v httpd) || exit 1; m=$("$b" ${APACHE_CONF:+-f "$APACHE_CONF"} -M 2>/dev/null) || exit 1; printf '%s\n' "$m" | grep -Eiq '(ssl|nss)_module' && echo compliant || echo noncompliant

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Install mod_ssl (dnf install mod_ssl; a2enmod ssl on Debian/Ubuntu). Then run apachectl configtest and reload Apache.

속성

운영 체제: 모두
태그: apachetls
참고 자료: CIS Apache HTTP Server 2.4 Benchmark v2.4.0 - 7.1 Ensure mod_ssl and/or mod_nss Is Installed

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target apache