Protocol: Weak SSL Cipher Negotiation¶

Identifier: issue_ssl_weak_cipher_negotiation

Scanner Support¶

Description¶

Weak cipher negotiation lets a TLS service select obsolete or insufficiently secure cryptography.

How we test: We offer weak cipher suites and verify whether the service accepts and negotiates them.

References:

• https://www.rfc-editor.org/rfc/rfc9325

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_weak_cipher_negotiation:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.