When our IA team performed security scans, an SSL Self-Signed medium finding was discovered along with other SSL findings. How do I resolve this issue? We do not use a CA, just a generated cipher and cert by the switch itself along with all the other switches on our network. How do i go in too check the SSLs, change, delete or update? The switch is currently running C3750-IPSERVICESk9-M 12.2(55)SE11 IOS. Would an IOS upgrade resolve any of the issues below? I cannot find any information on the possibility of it solving any of these issues.
Below are the other findings:
SSL Certificate cannot be trusted
SSL Version 2 and 3 Protocol Deletion
SSL Weak Cipher Suites Supported
SSL Certificate sighned using weak hashing algorithm
SSL Medium Strength cipher suites supported
SSL Self signed certificate
SSLv3 Padding Oracle on Downgraded Legacy Encryption Vulnerability (POODLE)
NTP Mode 6 Scanner
