rspec/rules/S4423/python/message.adoc

21 lines
462 B
Plaintext

=== Message
==== OpenSSL and ssl modules
When the system default is used:
> Change this code to explicitly enforce TLSv1.2 or above.
In all other cases:
> Change this code to enforce TLS 1.2 or above.
==== AWS APIGateway
Change this code to enforce TLS 1.2 or above.
==== AWS OpenSearch / Elasticsearch
Omitting "tls_security_policy" enables a deprecated version of TLS. Set it to enforce TLS 1.2 or above.
Change this code to enforce TLS 1.2 or above.