SSL cert configuration to address vulnerabilities on TIM server

Products

• APM

Issue/Introduction

SSL certificate configuration to address vulnerabilities on TIM server.

The TIM server currently showing following vulnerabilities:

SSL Sefl-Signed Cert
SSL Cert Cannot Be Trusted
SSL Cert Expiry

How to address these vulnerabilities on TIM server?

Environment

Release : 10.7.0

Component : Introscope

Resolution

Once we have CA Certificate, we need to update the ssl.conf.

Example:

SSLCertificateFile /etc/pki/tls/certs/certificate.crt
SSLCertificateKeyFile /etc/pki/tls/private/server.key
SSLCACertificateFile /etc/pki/tls/certs/intermediate.crt

Review the following information on this topic.

https://access.redhat.com/articles/1462323
https://access.redhat.com/articles/3652701