Ensure that strong algorithms are used for TLS certificates.

VisokaNivo 1Ručni pregledwebsphere

Opis

Certificates created with stronger algorithms use stronger hashes which is more secure. Also, some browsers warn when using weak certificates. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Ensure that Signature algorithm name is SHA256 or higher and Subject Public Key Algorithm is equal or higher than 2048 bit. keytool -list -v -keystore <keystore file name> -storepass <store password> - storetype <store type> | grep 'Signature algorithm name\|Subject Public Key Algorithm' ... Signature algorithm name: SHA256withRSA Subject Public Key Algorithm: 2048-bit RSA key ...

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Create certificates with SHA256 or higher algorithm and 2048 or higher key bit size.

Svojstva

Operativni sistemi: Bilo koji
Oznake: webspheremanual-review
Referenca: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 4.2.11 Ensure that strong algorithms are used for TLS certificates.