Adjust 4.18 default tls-cipher-suites assertion

Default list of cihpers in OCP 4.18 contains ciphers not considered strong: - TLS_AES_128_GCM_SHA256 - TLS_AES_256_GCM_SHA384 - TLS_CHACHA20_POLY1305_SHA256
ComplianceAsCode · Jan 20, 2025 · 72cd568 · 72cd568
1 parent 8ae4ebb
commit 72cd568
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/tests/assertions/ocp4/ocp4-cis-4.18.yml b/tests/assertions/ocp4/ocp4-cis-4.18.yml
@@ -111,7 +111,7 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-cis-api-server-tls-cipher-suites:
-   default_result: PASS
+   default_result: FAIL
    result_after_remediation: PASS
  e2e-cis-api-server-tls-private-key:
    default_result: PASS

diff --git a/tests/assertions/ocp4/ocp4-high-4.18.yml b/tests/assertions/ocp4/ocp4-high-4.18.yml
@@ -126,7 +126,7 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-high-api-server-tls-cipher-suites:
-   default_result: PASS
+   default_result: FAIL
    result_after_remediation: PASS
  e2e-high-api-server-tls-private-key:
    default_result: PASS

diff --git a/tests/assertions/ocp4/ocp4-moderate-4.18.yml b/tests/assertions/ocp4/ocp4-moderate-4.18.yml
@@ -123,7 +123,7 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-moderate-api-server-tls-cipher-suites:
-   default_result: PASS
+   default_result: FAIL
    result_after_remediation: PASS
  e2e-moderate-api-server-tls-private-key:
    default_result: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.18.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.18.yml
@@ -111,7 +111,7 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-tls-cipher-suites:
-   default_result: PASS
+   default_result: FAIL
    result_after_remediation: PASS
  e2e-pci-dss-4-0-api-server-tls-private-key:
    default_result: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4.18.yml b/tests/assertions/ocp4/ocp4-pci-dss-4.18.yml
@@ -111,7 +111,7 @@ rule_results:
    default_result: PASS
    result_after_remediation: PASS
  e2e-pci-dss-api-server-tls-cipher-suites:
-   default_result: PASS
+   default_result: FAIL
    result_after_remediation: PASS
  e2e-pci-dss-api-server-tls-private-key:
    default_result: PASS

diff --git a/tests/assertions/ocp4/ocp4-stig-4.18.yml b/tests/assertions/ocp4/ocp4-stig-4.18.yml
@@ -114,7 +114,7 @@ rule_results:
     default_result: PASS
     result_after_remediation: PASS
   e2e-stig-api-server-tls-cipher-suites:
-    default_result: PASS
+    default_result: FAIL
     result_after_remediation: PASS
   e2e-stig-api-server-tls-security-profile:
     default_result: PASS