fbprogmbh / Audit-Test-Automation

FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.
https://fb-pro.com/audit-test-automation-package-audit-tap/
BSD 3-Clause "New" or "Revised" License
86 stars 27 forks source link

Move away from static Cipher Suite order check towards checking for usage of strong ciphers #589

Closed TuemmlerKelch closed 3 months ago

TuemmlerKelch commented 4 months ago

Description

As cipher suite order is highly individual, it is more important to make sure there are no weak or insecure ciphers configured. This affects both SBD-072 and Risk Score Setting 4.1

What are the benefits?

Fair assessment

Acceptance Criteria!

A cipher suite order following all of the necessary criteria (Correct registry path and type) AND not containing weak or insecure ciphers will be considered passed

Linked Issues?

No response

Additional Information!

No response