Apache Tomcat
TMA-TOMCAT-6.2
Ensure SSLEnabled is set to True for Sensitive Connectors
OrtaDüzey 1Manuel incelemetomcat
Açıklama
The SSLEnabled setting determines if SSL is enabled for a specific Connector. It is recommended that SSL be utilized for any Connector that sends or receives sensitive information, such as authentication credentials or personal information. Manual review: the benchmark gives no reliable automated check for this control.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Review the server.xml and ensure all Connectors sending or receiving sensitive information have the SSLEnabled attribute set to true.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
In server.xml, set the SSLEnabled attribute to true for each Connector that sends or receives sensitive information <Connector … SSLEnabled="true" … />
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- tomcattls
- Referans
- CIS Apache Tomcat 10.1 Benchmark v1.0.0 - 6.2 Ensure SSLEnabled is set to True for Sensitive Connectors