0

looking for a bit of advice please. We've been battling with a PCI compliancy project for the last couple of days and we've managed to eliminate most of security warnings. What we're left with now is mainly untrusted SSL certificates on pop3, smtp and imap ports.

I was just wondering what would be the best course of action for overcoming this security issue. Is there a way to remove the untrusted certificates or do we have to purchase a CA SSL certificate? If so, can we get away with purchasing just one certificate? Or do we need one certificate for each port?

I'm also unsure of how you associate an SSL certificate with a port rather than a domain name.

Apologies if this is not very clear.

The VPS is CentOS 6.5 running Plesk 11.5.30

Improve this question
3

1 Answer 1

Reset to default
0

Independent of PCI, I can assure you that a single (HTTP) SSL Certificate is sufficient to secure pop3, smtp and imap ports as long as they are accessed under the same hostname as the webserver.

Improve this answer
2
  • Thank you very much for your answer David. So I can purchase and set up an SSL certificate for mail.example.com and use this to secure all pop3, smtp and imap ports?
    – Sean King
    May 12, 2014 at 11:48
  • 1
    That is correct Sean, as long as they all use mail.example.com.
    – Vasili Syrakis
    May 12, 2014 at 12:02

Not the answer you're looking for? Browse other questions tagged .