elastic / elastic/cloudbeat

CIS 9.4 Ensure the web app has 'Client Certificates (Incoming client certificates)' set to 'On'

Open
#2,737 1 comment 0 reactions 0 assignees View on GitHub
bug cloudbeat Team:Cloud Security
Dominant language
Go
Stars
58
Forks
55
Avg merge
9h 9m
Merged PRs (30d)
424

Description

**Describe the bug**
When selecting HTTP version 2.0, incoming client certificates must be ignored with azure web app. As the notification under the http version: "When selecting HTTP version 2.0, incoming client certificates must be ignored."

**Preconditions**
HTTP version 2.0 or lower can do mutual TLS.

**To Reproduce**
1. Activate HTTP Version 2.0, on settings, on the webapp. For each webapp, there will be a Trigger.

**Expected behavior**
Only trigger when using a compatible HTTP version with mutual tls, https version: <2.0. When hoovering on the blue notification on the settings tab, you get the warning: "When selecting HTTP version 2.0, incoming client certificates must be ignored."

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.