Skip to content

Protocol: Improper TLS Certificate Key Usage

Identifier: issue_ssl_improper_certificate_key_usage

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

Improper certificate key-usage extensions can permit unintended TLS operations. How we test: We validate the leaf certificate key-usage extension. References:

Configuration

Example

Example configuration:

---
security_tests:
  issue_ssl_improper_certificate_key_usage:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.