Skip to content

Two risky cryptographic algorithms found #508

@Charles1000Chen

Description

@Charles1000Chen

Describe the bug

The zhmc prometheus expoerter should not support any risky cryptographic algorithms.

Expected behavior
The two test items shoud be "OK" in testssh.sh test result.

To Reproduce
Test with testssl.sh, it will report the two issues in its test result.

Environment information

  • Output of zhmc_prometheus_exporter --version:
  • HMC version:

Command output

{
    "id"           : "cipher-tls1_2_xc028",
    "severity"     : "LOW",
    "finding"      : "TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
},{
    "id"           : "cipher-tls1_2_xc027",
    "severity"     : "LOW",
    "finding"      : "TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
}

Log file
<-- If possible, attach a log file generated with '--log-comp all=debug --log exporter.log'. -->

Metadata

Metadata

Assignees

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions