Protocol: Misconfigured SSL Certificate Subject Alternative Name¶

Identifier: issue_ssl_misconfigured_san

Scanner Support¶

Description¶

A malformed or incomplete Subject Alternative Name can cause TLS identity validation to fail or behave unexpectedly.

How we test: We inspect the certificate Subject Alternative Name extension for valid host identities.

References:

• https://www.rfc-editor.org/rfc/rfc6125

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_misconfigured_san:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.