Protocol: Insufficient SSL Certificate Key Size¶

Identifier: issue_ssl_insufficient_certificate_key_size

Scanner Support¶

Description¶

An undersized certificate key can be feasibly broken, allowing attackers to impersonate the TLS service.

How we test: We inspect the public-key size in the server certificate.

References:

• https://pages.nist.gov/800-57-part1/sp800-57r1_part1.html

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_insufficient_certificate_key_size:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.