OWASPASVS 5.0 requirement
ASVS-V12.3.4 Tls connections between internal services use trusted certificates.
- Standard
- OWASP ASVS 5.0
- Chapter
- V12 Secure Communication
- Section
- V12.3 General Service to Service Communication Security
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that TLS connections between internal services use trusted certificates. Where internally generated or self-signed certificates are used, the consuming service must be configured to only trust specific internal CAs and specific self-signed certificates.