TMA-MONGODB-4.3

Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)

VisokaNivo 1Automatskamongodb

Opis

Use TLS or SSL to protect all incoming and outgoing connections. This should include using TLS or SSL to encrypt communication between the mongod and mongos components of a MongoDB client as well as between all applications and MongoDB. MongoDB supports TLS/SSL (Transport Layer Security/Secure Sockets Layer) to encrypt all of MongoDB's network traffic. Checks the YAML config file /etc/mongod.conf (SKIP when it does not exist).

Kako se proverava

Metod provere: Obrazac u datoteci

Datoteka: /etc/mongod.conf
Obrazac: (?m)^[ \t]*mode:[ \t]*['\x22]?require(?:TLS|SSL)\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Set net.tls.mode: requireTLS with net.tls.certificateKeyFile and net.tls.CAFile in /etc/mongod.conf, update clients to use TLS, then restart mongod.

Svojstva

Operativni sistemi: Bilo koji
Oznake: mongodbtlsencryption
Referenca: CIS MongoDB 8 Benchmark v2.0.0 - 4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target mongodb