Google Compute SSL Policy Weak Cipher In Use
- Query id: 14a457f0-473d-4d1d-9e37-6d99b355b336
- Query name: Google Compute SSL Policy Weak Cipher In Use
- Platform: Terraform
- Severity: Medium
- Category: Encryption
- URL: Github
Description¶
This query confirms if Google Compute SSL Policy Weak Chyper Suits is Enabled, to do so we need to check if TLS is TLS_1_2, because other version have Weak Chypers
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "google_compute_ssl_policy" "positive1" {
name = "custom-ssl-policy"
min_tls_version = "TLS_1_1"
profile = "CUSTOM"
custom_features = ["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"]
}
resource "google_compute_ssl_policy" "positive2" {
name = "custom-ssl-policy"
profile = "CUSTOM"
custom_features = ["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"]
}