Protocol: Insecure TLS Protocol Negotiation¶

Identifier: issue_ssl_insecure_protocol_negotiation

Scanner Support¶

Description¶

Insecure protocol negotiation can permit a connection to use a deprecated or vulnerable TLS version.

How we test: We negotiate supported protocol versions and identify deprecated protocols accepted by the endpoint.

References:

• https://www.rfc-editor.org/rfc/rfc8996
• https://www.rfc-editor.org/rfc/rfc9325

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_insecure_protocol_negotiation:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.