LOW
Source
Trivy
ID
AVD-NIF-0006

Delete expired SSL certificates

Removing expired SSL/TLS certificates eliminates the risk that an invalid certificate will be

deployed accidentally to a resource such as NIFCLOUD Load Balancer(L4LB), which candamage the

credibility of the application/website behind the L4LB. As a best practice, it is

recommended to delete expired certificates.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Remove expired certificates

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
resource "nifcloud_ssl_certificate" "test" {
  certificate = <<CERT
-----BEGIN CERTIFICATE-----
MIIB7TCCAZWgAwIBAgIUOK0V7HZMbh9ehIGGzGfRz3ex1XUwDQYJKoZIhvcNAQEL
BQAwQjELMAkGA1UEBhMCVVMxFzAVBgNVBAgMDlRpbWVsZXNzIFZhbGxleTESMBAG
A1UECgwJRXZlcmxhc3QxDTALBgNVBAMMBHRlc3QwHhcNMjUwNDIyMDAwMDAwWhcN
OTk5MTIzMTIzNTk1OVowQjELMAkGA1UEBhMCVVMxFzAVBgNVBAgMDlRpbWVsZXNz
IFZhbGxleTESMBAGA1UECgwJRXZlcmxhc3QxDTALBgNVBAMMBHRlc3QwXDANBgkq
hkiG9w0BAQEFAANLADBIAkEAqQlF5OKu3jT1zEweW3ReRtSb6my6MXNzQWlOQUsS
kugTHV9B8W6FgVn7Fb/9hD+Q0CVBiP1FCJbE3+FCyiBaZQIDAQABo1MwUTAdBgNV
HQ4EFgQUQhFv2k3Xt5AXYp6KGHY2fM+zZcEwHwYDVR0jBBgwFoAUQhFv2k3Xt5AX
Yp6KGHY2fM+zZcEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAANBAF68
znVEx2UvM55Fos+0K8+8X3lhzvjvVYfRPr9FZ4H8T/egnyAD+aXXeZk6y9eEGa7A
Dp6aR3FHZ9bm0TDkiMI=
-----END CERTIFICATE-----
CERT
}