TMA-APACHE-7.9
Ensure All Web Content is Accessed via HTTPS
Açıklama
All of the website content should be served via HTTPS rather than HTTP. A redirect from the HTTP website to the HTTPS content is often useful and is recommended, but all significant content should be accessed via HTTPS so that it is authenticated and encrypted. Manual review: the benchmark gives no reliable automated check for this control.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Perform the following to determine if the recommended state is implemented: Gather the list of listening IP addresses from the Apache configuration files. The commands below may be used to extract the relevant IP addresses from the configuration files. The CONF_DIRS variable needs to be set to the list of directories that contain all of the Apache configuration files. ## Replace the following directory list with the appropriate list. CONF_DIRS="/etc/httpd/conf /etc/httpd/conf.d /etc/httpd/conf_dir2 . . .
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Perform the following to implement the recommended state: Move the web content to a TLS enabled website, and add an HTTP Redirect directive to the Apache configuration file to redirect to the TLS enabled website similar to the example shown. Redirect permanent / https://www.cisecurity.org/
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- apachetls
- Referans
- CIS Apache HTTP Server 2.4 Benchmark v2.4.0 - 7.9 Ensure All Web Content is Accessed via HTTPS