BaselineWatch
Apply as published
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Linux RHEL-10-300085

DISA STIG RHEL-10-300085 (CAT I): RHEL 10 must implement DoW-approved encryption in the OpenSSL package.

DISA STIG recommends

RHEL-10-300085 CAT I

RHEL 10 must implement DoW-approved encryption in the OpenSSL package.

NIST SP 800-53: AC-17(2)

Check

Verify the RHEL 10 OpenSSL library is configured to use only ciphers employing FIPS 140-3-approved algorithms with the following command: $ grep -i opensslcnf.config /etc/pki/tls/openssl.cnf .include = /etc/crypto-policies/back-ends/opensslcnf.config If the "opensslcnf.config" is not defined in the "/etc/pki/tls/openssl.cnf" file, this is a finding.

Fix

Configure the RHEL 10 OpenSSL library to use the systemwide cryptographic policy. Edit the "/etc/pki/tls/openssl.cnf" and add or modify the following line: .include = /etc/crypto-policies/back-ends/opensslcnf.config

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan