ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-04 19:21:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(aws): remove SHA-1 from ACM insecure key algorithms (#7547)

Browse Source
This commit is contained in:
Felix Dreissig
2025-04-18 22:25:44 +02:00
committed by GitHub
parent 4f3496194d
commit 0b6aa0ddcd
5 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/k8s/helm/prowler-api/values.yaml
-1
View File
@@ -399,7 +399,6 @@ mainConfig:
[
"RSA-1024",
"P-192",
"SHA-1",
]
# AWS EKS Configuration
prowler/config/config.yaml
-1
View File
@@ -327,7 +327,6 @@ aws:
[
"RSA-1024",
"P-192",
"SHA-1",
]
# AWS EKS Configuration
prowler/providers/aws/services/acm/acm_certificates_with_secure_key_algorithms/acm_certificates_with_secure_key_algorithms.py
+1 -1
View File
@@ -14,7 +14,7 @@ class acm_certificates_with_secure_key_algorithms(Check):
report.status = "PASS"
report.status_extended = f"ACM Certificate {certificate.id} for {certificate.name} uses a secure key algorithm ({certificate.key_algorithm})."
if certificate.key_algorithm in acm_client.audit_config.get(
"insecure_key_algorithms", ["RSA-1024", "P-192", "SHA-1"]
"insecure_key_algorithms", ["RSA-1024", "P-192"]
):
report.status = "FAIL"
report.status_extended = f"ACM Certificate {certificate.id} for {certificate.name} does not use a secure key algorithm ({certificate.key_algorithm})."
tests/config/config_test.py
-1
View File
@@ -297,7 +297,6 @@ config_aws = {
"insecure_key_algorithms": [
"RSA-1024",
"P-192",
"SHA-1",
],
"eks_required_log_types": [
"api",
tests/config/fixtures/config.yaml
-1
View File
@@ -317,7 +317,6 @@ aws:
[
"RSA-1024",
"P-192",
"SHA-1",
]
# AWS EKS Configuration