Halaman ini diterjemahkan oleh Cloud Translation API.

SSL Labs

Versi integrasi: 8.0

Mengonfigurasi integrasi SSL Labs di Google Security Operations

Untuk mendapatkan petunjuk mendetail terkait cara mengonfigurasi integrasi di Google SecOps, lihat Mengonfigurasi integrasi.

Tindakan

Menganalisis Entity

Deskripsi

Menganalisis host atau URL.

Parameter

T/A

Kasus penggunaan

T/A

Run On

Tindakan ini berjalan di entity berikut:

URL
Hostname

Hasil Tindakan

Pengayaan Entity

Nama Kolom Pengayaan	Logika-Kapan harus diterapkan
status	Menampilkan apakah ada di hasil JSON
protokol	Menampilkan apakah ada di hasil JSON
criteriaVersion	Menampilkan apakah ada di hasil JSON
isPublic	Menampilkan apakah ada di hasil JSON
testTime	Menampilkan apakah ada di hasil JSON
menghosting	Menampilkan apakah ada di hasil JSON
certs	Menampilkan apakah ada di hasil JSON
ocspURIs	Menampilkan apakah ada di hasil JSON
crlRevocationStatus	Menampilkan apakah ada di hasil JSON
commonNames	Menampilkan apakah ada di hasil JSON
altNames	Menampilkan apakah ada di hasil JSON
mentah	Menampilkan apakah ada di hasil JSON
keySize	Menampilkan apakah ada di hasil JSON
mustStaple	Menampilkan apakah ada di hasil JSON
sct	Menampilkan apakah ada di hasil JSON
sgc	Menampilkan apakah ada di hasil JSON
id	Menampilkan apakah ada di hasil JSON
masalah	Menampilkan apakah ada di hasil JSON
subject	Menampilkan apakah ada di hasil JSON
keyAlg	Menampilkan apakah ada di hasil JSON
keyStrength	Menampilkan apakah ada di hasil JSON
notBefore	Menampilkan apakah ada di hasil JSON
notAfter	Menampilkan apakah ada di hasil JSON
keyKnownDebianInsecure	Menampilkan apakah ada di hasil JSON
dnsCaa	Menampilkan apakah ada di hasil JSON
ocspRevocationStatus	Menampilkan apakah ada di hasil JSON
pinSha256	Menampilkan apakah ada di hasil JSON
revocationInfo	Menampilkan apakah ada di hasil JSON
sha256Hash	Menampilkan apakah ada di hasil JSON
revocationStatus	Menampilkan apakah ada di hasil JSON
sigAlg	Menampilkan apakah ada di hasil JSON
serialNumber	Menampilkan apakah ada di hasil JSON
issuerSubject	Menampilkan apakah ada di hasil JSON
startTime	Menampilkan apakah ada di hasil JSON
engineVersion	Menampilkan apakah ada di hasil JSON
endpoint	Menampilkan apakah ada di hasil JSON
sims	Menampilkan apakah ada di hasil JSON
hasil	Menampilkan apakah ada di hasil JSON
daftar	Menampilkan apakah ada di hasil JSON
dhPrimes	Menampilkan apakah ada di hasil JSON
fallbackScsv	Menampilkan apakah ada di hasil JSON
hpkpRoPolicy	Menampilkan apakah ada di hasil JSON
pin	Menampilkan apakah ada di hasil JSON
status	Menampilkan apakah ada di hasil JSON
perintah	Menampilkan apakah ada di hasil JSON
matchedPins	Menampilkan apakah ada di hasil JSON
rc4WithModern	Menampilkan apakah ada di hasil JSON
dhYsReuse	Menampilkan apakah ada di hasil JSON
openSSLLuckyMinus20	Menampilkan apakah ada di hasil JSON
hasSct	Menampilkan apakah ada di hasil JSON
supportsAlpn	Menampilkan apakah ada di hasil JSON
dhUsesKnownPrimes	Menampilkan apakah ada di hasil JSON
hpkpPolicy	Menampilkan apakah ada di hasil JSON
port	Menampilkan apakah ada di hasil JSON

Insight

T/A

Hasil Skrip

Nama Hasil Skrip	Opsi Nilai	Contoh
berhasil	Benar/Salah	success:False

Hasil JSON

[
    {
        "EntityResult": {
            "status": "READY",
            "protocol": "http",
            "criteriaVersion": "2009p",
            "isPublic": false,
            "testTime": 1548163096137,
            "host": "https://www.siemplify.co",
            "certs": [{
                "ocspURIs": ["http://ocsp.int-x3.letsencrypt.org"],
                "crlRevocationStatus": 4,
                "commonNames": ["www.siemplify.co"],
                "altNames": ["www.siemplify.co"],
                "raw": "-----BEGIN CERTIFICATE-----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\\r\\nVglJKg==\\r\\n-----END CERTIFICATE-----\\n",
                "keySize": 2048,
                "mustStaple": false,
                "sct": true,
                "sgc": 0,
                "id": "236a2b12c7f9384f5907724502b8635bc86f4281a543b9d77b7a5a87d1feed2d",
                "issues": 0,
                "subject": "CN=www.siemplify.co",
                "keyAlg": "RSA",
                "keyStrength": 2048,
                "notBefore": 1545253164000,
                "notAfter": 1553029164000, "sha1Hash":
                "22a53bd913fca0bc60cd5d6e577271585019b2b4",
                "keyKnownDebianInsecure": false,
                "dnsCaa": false,
                "ocspRevocationStatus": 2,
                "pinSha256": "KBlMyqNKhogFXSV1X6/xpt62dfut1th0XspgxFAtgSY=",
                "revocationInfo": 2,
                "sha256Hash": "236a2b12c7f9384f5907724502b8635bc86f4281a543b9d77b7a5a87d1feed2d",
                "revocationStatus": 2,
                "sigAlg": "SHA256withRSA",
                "serialNumber": "039a8feb23ceddc6e7d63baddaadf658ed58",
                "issuerSubject": "CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US"
            }],
            "startTime": 1548162999719,
            "engineVersion": "1.32.13",
            "endpoints": [{
                "gradeTrustIgnored": "A",
                "grade": "A",
                "hasWarnings": false,
                "serverName": "1.1.1.1.bc.googleusercontent.com",
                "delegation": 2,
                "details": {
                    "sims": {
                        "results": [{
                            "errorCode": 1,
                            "sigAlg": "SHA256withRSA",
                            "attempts": 0,
                            "client": {
                                "version": "2.3.7",
                                "isReference": false,
                                "id": 56,
                                "name": "Android"
                            },
                            "errorMessage": "Protocol mismatch (not simulated)"
                        }]},
                    "poodleTls": 1,
                    "freak": false,
                    "sessionTickets": 1,
                    "compressionMethods": 0,
                    "suites": [{
                        "list": [{
                            "cipherStrength": 256,
                            "namedGroupName": "secp256r1",
                            "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
                            "namedGroupId": 23,
                            "namedGroupBits": 256,
                            "kxStrength": 3072,
                            "kxType": "ECDH",
                            "id": 49172
                        }],
                        "protocol": 770,
                        "preference": true
                    },{
                        "protocol": 771,
                        "preference": true
                    }],
                    "dhPrimes": [                "889c6c058890bda62ced33f067eaf414568910838d4bdc23e3dbef17caf5cf117c1b48f0dd74b03b193af42d011a4b7fde725dc6ab97897a81e0ee81e1af420ce716cec48a862d4f8193709df4c59837c8a5f73006147b3c0b8d531074c83f9c94914150eb29b855d0f93b5c9b125b5eb3a21e2a638eebc50a517872af93dafbecfa137c379139272a0ecbfd5a2b3bba2f2555540a0cd2cec215b2701beaaad208c6ac3e1be79e319f39ccb2d9e1ab21d4a40e5db817bc3baa5d656bdc6764da4d4e750a5db7a0a2c724cb376f6a7a7ef1e4e58ebcdd886fdc25241c76941eaf3197ada60ca0ada91767eb0193c86eb9b9670a46511c3250f5575e04abd5e8cb"
                                ],
                    "fallbackScsv": true,
                    "hpkpRoPolicy": {
                        "pins": [],
                        "status": "absent",
                        "directives": [],
                        "matchedPins": []
                    },
                    "rc4WithModern": false,
                    "dhYsReuse": false,
                    "openSSLLuckyMinus20": 1,
                    "hasSct": 1,
                    "supportsAlpn": true,
                    "dhUsesKnownPrimes": 0,
                    "hpkpPolicy": {
                        "pins": [],
                        "status": "absent",
                        "directives": [],
                        "matchedPins": []
                    },
                    "staticPkpPolicy": {
                        "serverSignature": "nginx",
                        "poodle": false,
                        "hstsPolicy": {
                            "status": "absent",
                            "LONG_MAX_AGE": 15552000,
                            "directives": {
                            }},
                        "ocspStapling": false,
                        "protocols": [{
                            "version": "1.1",
                            "id": 770,
                            "name": "TLS"
                        }],
                        "ticketbleed": 1,
                        "forwardSecrecy": 4,
                        "miscIntolerance": 0,
                        "hstsPreloads": [{
                            "status": "absent",
                            "source": "Chrome",
                            "hostname": "www.siemplify.co",
                            "sourceTime": 1548162600888}],
                        "drownVulnerable": false,
                        "ecdhParameterReuse": false,
                        "vulnBeast": false,
                        "drownHosts": [],
                        "certChains": [{
                            "trustPaths": [{
                                "trust": [{
                                    "isTrusted": true,
                                    "rootStore": "Windows"
                                }],
                                "certIds": [                                 "236a2b12c7f9384f5907724502b8635bc86f4281a543b9d77b7a5a87d1feed2d", "25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d", "0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739"
                                           ]}],
                            "noSni": false,
                            "issues": 0
                        }],
                        "prefixDelegation": true,
                        "supportsAead": true,
                        "alpnProtocols": "h2 http/1.1",
                        "logjam": false,
                        "renegSupport": 2,
                        "heartbleed": false,
                        "heartbeat": true,
                        "sniRequired": true,
                        "sessionResumption": 2,
                        "httpStatusCode": 200,
                        "nonPrefixDelegation": false,
                        "rc4Only": false,
                        "openSslCcs": 1,
                        "bleichenbacher": 1,
                        "httpTransactions": [{
                            "requestLine": "GET / HTTP/1.1",
                            "requestHeaders": [
                                "Host: www.siemplify.co",
                                "User-Agent: SSL Labs (https://www.ssllabs.com/about/assessment.html); on behalf of XXX.XXX.XXX.XXX",
                                "Accept: */*"
                            ],
                            "requestUrl": "https://www.siemplify.co/",
                            "fragileServer": false,
                            "responseLine": "HTTP/1.1 200 OK",
                            "responseHeadersRaw": [
                                "Server: nginx",
                                "Date: Tue, 22 Jan 2019 13:16:44 GMT",
                                "Content-Type: text/html; charset=UTF-8"
                            ],
                            "responseHeaders": [{
                                "name": "Server",
                                "value": "nginx"
                            }],
                            "statusCode": 200
                        }],
                        "supportsRc4": false,
                        "drownErrors": false,
                        "hostStartTime": 1548162999719,
                        "protocolIntolerance": 0,
                        "supportsNpn": true,
                        "namedGroups": {
                            "list": [{
                                "namedGroupType": "EC",
                                "bits": 283,
                                "id": 10,
                                "name": "sect283r1"
                            }],
                            "preference": true
                        },
                        "npnProtocols": "h2 http/1.1"
                    },
                    "isExceptional": false,
                    "duration": 96329,
                    "progress": 100,
                    "ipAddress": "1.1.1.1",
                    "statusMessage": "Ready"
                }],
                "port": 443
            },
                          "Entity": "https://www.siemplify.co"
                          }
        ]

Ping