I'm trying to get PCI compliant and the PCI scanning company is showing below Fail scan report
SL Certificate - Self-Signed Certificate SSL Certificate - Self-Signed Certificate port 25/tcp over SSL
IMPACT: By exploiting this vulnerability, an attacker can launch a man-in-the-middle attack. SOLUTION: Please install a server certificate signed by a trusted third-party Certificate Authority. RESULT: Certificate #0 CN=ip-172-31-27-94.ap-southeast-1.compute.internal is a self signed certificate.
But I already purchased third party SSL certificate and works well over port 443.
How to resove this for port 25 ?
root@www:/etc/apache2# netstat -tapen | grep ":25" tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 0 9610 1284/master tcp6 0 0 :::25
:::* LISTEN 0 9611 1284/master