What is the SSL Not Available Risk? | UpGuard

This document explains the “SSL not available” finding and provides practical guidance to obtain, install, and maintain SSL/TLS certificates, enforce HTTPS and HSTS, configure Nginx/Apache, and address software/library compatibility (OpenSSL vs. LibreSSL) to prevent plaintext exposure and MITM risks. It emphasizes certificate lifecycle management (including intermediates and renewals), recommends modern TLS versions to avoid legacy issues like POODLE, and maps these practices to regulatory expectations such as PCI DSS and NIST SP 800-53.