ComplianceAsCode / ComplianceAsCode/content
configure_gnutls_tls_crypto_policy should be less strict in the order it checks the algorithms
Open
RHEL
triaged
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
https://github.com/ComplianceAsCode/content/blob/9fcf8560cf16987306bd8179050ef6660c67bb73/linux_os/guide/system/software/integrity/crypto/configure_gnutls_tls_crypto_policy/rule.yml#L15
This is possibly changing in a upcoming release of RHEL8 and the rule should be adapted accordingly.
New string: `+VERS-ALL:-VERS-DTLS0.9:-VERS-TLS1.1:-VERS-TLS1.0:-VERS-SSL3.0:-VERS-DTLS1.0`
Contributor guide
Assessment
This issue has not been assessed yet.