Security Test: SSL Certificate¶

Scanner(s) Support¶

Description¶

Default Severity: high

SSL certificates secure communications between users and servers but are only as strong as how they're set up. If misconfigured, expired, or using weak encryption, the certificate may give a false signal of safety, allowing attackers to intercept or tamper with data without detection. Developers might overlook details like proper validation or timely updates, opening the door to man-in-the-middle attacks and other breaches that could expose sensitive information.

Reference:

• https://www.thesslstore.com/blog/what-happens-when-your-ssl-certificate-expires/

Configuration¶

Identifier: frontend_protocol/ssl_certificate

Examples¶

All configuration available:

checks:
  frontend_protocol/ssl_certificate:
    skip: false # default

Compliance and Standards¶