Security Test: SSL Certificate¶

Description¶

Default Severity: high

Certificates can go wrong when they're misconfigured, expired, or use weak encryption, which means the secure link you trust becomes vulnerable to interception or manipulation. If a certificate isn’t set up correctly, attackers might trick users into thinking they're connected to a safe server when they're not, potentially stealing sensitive data or injecting malicious content. Developers often overlook the details like proper certificate validation, keeping up with encryption best practices, or updating protocols, leaving applications open to man-in-the-middle attacks and data breaches.

Reference:

• https://www.thesslstore.com/blog/what-happens-when-your-ssl-certificate-expires/

Configuration¶

Identifier: protocol/ssl_certificate

Examples¶

All configuration available:

checks:
  protocol/ssl_certificate:
    skip: false # default

Compliance and Standards¶