Skip to content

Protocol: Improper TLS Certificate Extended Key Usage

Identifier: issue_ssl_improper_certificate_eku

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

An unsuitable EKU can permit a certificate to be used for an unintended TLS purpose. How we test: We validate the leaf certificate extended key usage. References:

Configuration

Example

Example configuration:

---
security_tests:
  issue_ssl_improper_certificate_eku:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.