Ensure that strong algorithms are used for TLS certificates.

ВисокаНиво 1Ручни прегледwebsphere

Опис

Certificates created with stronger algorithms use stronger hashes which is more secure. Also, some browsers warn when using weak certificates. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Ensure that Signature algorithm name is SHA256 or higher and Subject Public Key Algorithm is equal or higher than 2048 bit. keytool -list -v -keystore <keystore file name> -storepass <store password> - storetype <store type> | grep 'Signature algorithm name\|Subject Public Key Algorithm' ... Signature algorithm name: SHA256withRSA Subject Public Key Algorithm: 2048-bit RSA key ...

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Create certificates with SHA256 or higher algorithm and 2048 or higher key bit size.

Својства

Оперативни системи: Било који
Ознаке: webspheremanual-review
Референца: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 4.2.11 Ensure that strong algorithms are used for TLS certificates.