topic SSL certificates in Extensions

SSL certificates

AskMe-Solutions — Mon, 13 Sep 2021 08:04:28 GMT

Hi everyone,

The security team has a Vulnerability Assessment (VA scan) on Dynatrace managed and them found SSL Certificate Cannot Be Trusted, SSL Certificate Signed Using Weak Hashing Algorithm and SSL Certificate with Wrong Hostname.

So, we would like to know about these SSL certificates. What does it mean?

Thanks

Re: SSL certificates

AntonioSousa — Fri, 10 Sep 2021 12:20:07 GMT

Most of your messages are referencing the 9999 port, which is used typically between OneAgent & ActiveGate. You can configure a specific certificate for it:
https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/configure-custom-ssl-certificate-on-activegate/

On the 443 ports, not sure if they are the Dynatrace clusters. But they only give "weak hashing algorithm" messages. It's because certainly it's using SHA-1, which is not that insecure. Should probably check with Support in this case.