STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

TOSS 5 must implement DOD or other applicable U.S. Government agency-approved TLS encryption in the OpenSSL package.

DISA Rule

SV-282528r1201630_rule

Vulnerability Number

V-282528

Group Title

SRG-OS-000250-GPOS-00093

Rule Version

TOSS-05-000474

Severity

CAT II

CCI(s)

• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

Configure the TOSS 5 OpenSSL library to use only DOD-approved TLS encryption by editing the following line in the "/etc/crypto-policies/back-ends/opensslcnf.config" file:

TLS.MinProtocol = TLSv1.2
DTLS.MinProtocol = DTLSv1.2

Restart the system for the changes to take effect.

Check Contents

Verify TOSS 5 OpenSSL library is configured to use TLS 1.2 encryption or stronger with following command:

$ grep -i minprotocol /etc/crypto-policies/back-ends/opensslcnf.config

TLS.MinProtocol = TLSv1.2
DTLS.MinProtocol = DTLSv1.2

If the "TLS.MinProtocol" is set to anything older than "TLSv1.2" or the "DTLS.MinProtocol" is set to anything older than "DTLSv1.2", this is a finding.

Vulnerability Number

V-282528

Documentable

False

Rule Version

TOSS-05-000474

Severity Override Guidance

Verify TOSS 5 OpenSSL library is configured to use TLS 1.2 encryption or stronger with following command:

$ grep -i minprotocol /etc/crypto-policies/back-ends/opensslcnf.config

TLS.MinProtocol = TLSv1.2
DTLS.MinProtocol = DTLSv1.2

If the "TLS.MinProtocol" is set to anything older than "TLSv1.2" or the "DTLS.MinProtocol" is set to anything older than "DTLSv1.2", this is a finding.

Check Content Reference

M

Target Key

5738