TLS Version 1.0 / 1.1 Protocol Detection and Cipher vulnerable to SWEET32 attack about app-autoscaler-release

[silvestre]

Thank you for reporting this @donacarr! It seems we missed to call (e.g.) WithInternalServiceDefaults in https://github.com/cloudfoundry/app-autoscaler-release/blob/main/src/autoscaler/models/security.go

We'll take this up with priority.

[silvestre]

With release 9.1.0 we're back to A strength.

# nmap -sV --script ssl-enum-ciphers -p 6105 localhost
Starting Nmap 7.80 ( https://nmap.org ) at 2022-11-25 16:08 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000065s latency).
Other addresses for localhost (not scanned): ::1
rDNS record for 127.0.0.1: 378529dc-9122-4ad9-b342-2059c3133ecc

PORT     STATE SERVICE       VERSION
6105/tcp open  ssl/isdninfo?
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|     compressors: 
|       NULL
|     cipher preference: server
|     warnings: 
|       Key exchange (secp256r1) of lower strength than certificate key
|_  least strength: A