SSL/TLS Server Test of

Transcription

1 SSL/TLS Server Test of Test SSL/TLS implementation of any service on any port for compliance with PCI DSS requirements, HIPAA guidance and NIST guidelines. FINAL GRADE December 22nd :37 CET :443 COMPLIANCE WITH Assessment Executive Summary HIGHLIGHTS The server supports cipher suites that are not approved by NIST guidelines and HIPAA guidance. Non-compliant with NIST and HIPAA The server prefers cipher suites supporting Perfect-Forward-Secrecy. 1

2 SSL Certificate Overview RSA CERTIFICATE INFORMATION Issuer Trusted Common Name Signature Algorithm Subject Alternative Names Transparency Validation Level CRL OCSP OCSP Must-Staple Supports OCSP Stapling Valid From Valid To COMODO RSA Domain Validation Secure Server CA Yes RSA 4096 bits sha256withrsaencryption DNS: DNS:rotenburger-gruene.de No DV No No October 12th 2017, 02:00 CEST October 13th 2018, 01:59 CEST CERTIFICATE CHAIN Server certificate Signature Algorithm SHA256 PIN Expires in RSA 4096 bits sha256withrsaencryption c eeb616acdb e4ed906643ef709e0ab631bb3153b b RyxzPluyd5IIT7rNUNF3Rmvu9dDxhGne/FWLIjmTxyM= 295 days COMODO RSA Domain Validation Secure Server CA Intermediate CA Signature Algorithm SHA256 PIN Expires in RSA 2048 bits sha384withrsaencryption 39df71b20e752359b f181016fcba83909d1f0480b6b13d1238b7 klo23nt2ehfdxcfx3ehtdresmz3asj1muo+4aidjiuy= 4,070 days COMODO RSA Certification Authority Intermediate CA Signature Algorithm SHA256 PIN Expires in RSA 4096 bits sha384withrsaencryption cf1895b94a858aeb07eeb4dfb6da49d97983f5c6e84d0dbab4c3adcdb4c29929 grx4ta9hpzx6tshkmcrvpaptqgo67cydnvprlg5yrme= 890 days AddTrust External CA Root Self-signed Root CA RSA 2048 bits 2

3 Signature Algorithm SHA256 PIN Expires in sha1withrsaencryption df63f84c2b bf13c7deafb11c68393f493a67035dc87693cedf11a9247 lcppfqbkrlj3ecvfakeip0+44vaojuymbnoaeuk7teu= 890 days CERTIFICATE CHAIN CONTINUED Server certificate Signature Algorithm SHA256 PIN Expires in RSA 4096 bits sha256withrsaencryption c eeb616acdb e4ed906643ef709e0ab631bb3153b b RyxzPluyd5IIT7rNUNF3Rmvu9dDxhGne/FWLIjmTxyM= 295 days COMODO RSA Domain Validation Secure Server CA Intermediate CA Signature Algorithm SHA256 PIN Expires in RSA 2048 bits sha384withrsaencryption 39df71b20e752359b f181016fcba83909d1f0480b6b13d1238b7 klo23nt2ehfdxcfx3ehtdresmz3asj1muo+4aidjiuy= 4,070 days COMODO RSA Certification Authority Self-signed Root CA Signature Algorithm SHA256 PIN Expires in RSA 4096 bits sha384withrsaencryption fa45b88ceead aa6cc10667de2d45de5c39f90f51b4f1d b1b2 grx4ta9hpzx6tshkmcrvpaptqgo67cydnvprlg5yrme= 7,333 days 3

4 Test For Compliance With PCI DSS Requirements Reference: PCI DSS Requirements 2.3 and 4.1 CERTIFICATES ARE TRUSTED All the certificates provided by the server are trusted. SUPPORTED CIPHERS List of all cipher suites supported by the server: TLSV1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA

5 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_256_GCM_SHA TLSV1.1 TLSV1.0 5

6 SUPPORTED PROTOCOLS List of all SSL/TLS protocols supported by the server: TLSv1.0 TLSv1.0 TLSv1.1 TLSv1.1 TLSv1.2 TLSv1.2 Deprecated. Dropped in June 2018 DIFFIE-HELLMAN PARAMETER SIZE Diffie-Hellman parameter size: 2048 bits SUPPORTED ELLIPTIC CURVES List of all elliptic curves supported by the server: P-256 (prime256v1) (256 bits) P-256 (prime256v1) (256 bits) POODLE OVER TLS The server is not vulnerable to POODLE over TLS. Not vulnerable CVE The server is not vulnerable to OpenSSL padding-oracle flaw (CVE ). Not vulnerable SERVER DOES NOT SUPPORT CLIENT-INITIATED INSECURE RENEGOTIATION The server does not support client-initiated insecure renegotiation. HEARTBLEED The server version of OpenSSL is not vulnerable to Heartbleed attack. Not vulnerable CVE The server is not vulnerable to CVE (OpenSSL CCS flaw). Not vulnerable 6

7 Test For Compliance With HIPAA Reference: HIPAA of 1996, Guidance Specifying the Technologies and Methodologies that Render Protected Health Information Unusable, Unreadable, or Indecipherable to Unauthorized Individuals. X509 CERTIFICATES ARE IN VERSION 3 All the X509 certificates provided by the server are in version 3. SERVER DOES NOT SUPPORT OCSP STAPLING The server does not support OCSP stapling for its RSA certificate. Its support allows better verification of the certificate validation status. SUPPORTED PROTOCOLS List of all SSL/TLS protocols supported by the server: TLSv1.0 TLSv1.0 TLSv1.1 TLSv1.1 TLSv1.2 TLSv1.2 SUPPORTED CIPHERS List of all cipher suites supported by the server: TLSV1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 7

8 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_256_GCM_SHA TLSV1.1 TLSV1.0 8

9 DIFFIE-HELLMAN PARAMETER SIZE Diffie-Hellman parameter size: 2048 bits SUPPORTED ELLIPTIC CURVES List of all elliptic curves supported by the server: P-256 (prime256v1) (256 bits) P-256 (prime256v1) (256 bits) TLSV1.1 SUPPORTED The server supports TLSv1.1 which is mandatory to comply with HIPAA guidance. TLSV1.2 SUPPORTED The server supports TLSv1.2 which is the only SSL/TLS protocol that currently has no known flaws or exploitable weaknesses. EC_POINT_FORMAT EXTENSION The server supports the EC_POINT_FORMAT TLS extension. 9

10 Test For Compliance With NIST Guidelines Reference: NIST Special Publication Revision 1 - Section 3 X509 CERTIFICATES ARE IN VERSION 3 All the X509 certificates provided by the server are in version 3. SERVER DOES NOT SUPPORT OCSP STAPLING The server does not support OCSP stapling for its RSA certificate. Its support allows better verification of the certificate validation status. SUPPORTED CIPHERS List of all cipher suites supported by the server: TLSV1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA

11 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_256_GCM_SHA TLSV1.1 TLSV1.0 11

12 SUPPORTED PROTOCOLS List of all SSL/TLS protocols supported by the server: TLSv1.0 TLSv1.0 TLSv1.1 TLSv1.1 TLSv1.2 TLSv1.2 DIFFIE-HELLMAN PARAMETER SIZE Diffie-Hellman parameter size: 2048 bits SUPPORTED ELLIPTIC CURVES List of all elliptic curves supported by the server: P-256 (prime256v1) (256 bits) P-256 (prime256v1) (256 bits) TLSV1.1 SUPPORTED The server supports TLSv1.1 which is mandatory to comply with NIST guidelines. TLSV1.2 SUPPORTED The server supports TLSv1.2 which is the only SSL/TLS protocol that currently has no known flaws or exploitable weaknesses. EC_POINT_FORMAT EXTENSION The server supports the EC_POINT_FORMAT TLS extension. 12

13 Test For Industry Best-Practices DNSCAA This domain does not have a Certification Authority Authorization (CAA) record. Information CERTIFICATES DO NOT PROVIDE EV The RSA certificate provided is NOT an Extended Validation (EV) certificate. Information SERVER HAS CIPHER PREFERENCE The server enforces cipher suites preference. SERVER PREFERRED CIPHER SUITES Preferred cipher suite for each protocol supported (except SSLv2). Expected configuration are ciphers allowed by PCI DSS and enabling PFS: TLSv1.0 TLSv1.0 TLSv1.1 TLSv1.1 TLSv1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLSv1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 SERVER PREFERS CIPHER SUITES PROVIDING PFS For TLS family of protocols, the server prefers cipher suite(s) providing Perfect Forward Secrecy (PFS). ALWAYS-ON SSL The HTTP version of the website redirects to the HTTPS version. MIXED CONTENT The website includes HTTP content in HTTPS. Misconfiguration or weakness SERVER DOES NOT PROVIDE HSTS The server does not enforce HTTP Strict Transport Security. We advise to enable it to enforce the user to browse the website in HTTPS. Misconfiguration or weakness SERVER DOES NOT PROVIDE HPKP The server does not enforce HTTP Public Key Pinning that helps preventing man-in-the-middle attacks. Information TLS_FALLBACK_SCSV The server supports TLS_FALLBACK_SCSV extension for protocol downgrade attack prevention. SERVER DOES NOT SUPPORT CLIENT-INITIATED SECURE RENEGOTIATION The server does not support client-initiated secure renegotiation. SERVER-INITIATED SECURE RENEGOTIATION The server supports secure server-initiated renegotiation. 13

14 SERVER DOES NOT SUPPORT TLS COMPRESSION TLS compression is not supported by the server. 14