cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
621
Views
0
Helpful
1
Replies

SSL with pct in the https service?

jusecas86
Level 1
Level 1

Hi,

Recently, in my organization we ran a vulnerabilty test and  the ACS platfomr got this vulnerability  ssl-pct1-bo basically consist when an application over https run a protocol named ptc that is a library of ssl, this is a potencial risk because it  could permit execute a buffer overflow over the machine, but when I look for information about it i found that affects systems over windows O.S. I want to know if this vulnerability could affect my ACS. It is 5.1.0.44.5 version. I know that my acs is based on a linux o.s but i want to know if ptc could be execute altought this.

Regards.

1 Reply 1

Jagdeep Gambhir
Level 10
Level 10

Juan,

ACS does not use MD5 for CSR or self sign cert generation. Option we have is either SHA1 or SHA256.

Regards

~JG

Do rate helpful posts