Analyzing apache

audit/system/plugins/apache.py

@@ -1,10 +1,17 @@
 #!/usr/bin/env python3
 
-def apache() -> list:
-    ssl = list()
+def apache_protocols() -> dict:
+    ssl = dict()
 
     # Check if apaches has disabled the bad SSL/TLS version
-
+    ssl["description"] = "Disable deprecated SSL/TLS versions"
+    ssl["level"] = "high"
+    ssl["protocols"] = list()
+    # https://httpd.apache.org/docs/trunk/ssl/ssl_howto.html
+    ssl["protocols"].append("-TLSv1")
+    ssl["protocols"].append("-TLSv1.1")
+    ssl["protocols"].append("-SSLv3")
+    ssl["recommand_value"] = "SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1"
 
     return ssl