Configuration: Self Signed SSL Certificate¶

Identifier: self_signed_ssl

Scanner(s) Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner

Description¶

self-signed certificates are public key certificates that are not issued by a certificate authority. These self-signed certificates are easy to make and do not cost money. However, they do not provide any trust value.

Reference:

https://www.rapid7.com/db/vulnerabilities/ssl-self-signed-certificate/

Configuration¶

Example¶

Example configuration:

---
security_tests:
  self_signed_ssl:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

`assets_allowed`¶

Type : List[AssetType]*

List of assets that this check will cover.

`skip`¶

Type : boolean

Skip the test if true.