PCI Compliance - TLS 1.1, smtpd_tls_mandatory_protocols

Virtualmin
4

Howdy,

Well, there’s some details here in this PCI compliance doc on configuring the ciphers used by your various services:

https://www.virtualmin.com/documentation/security/pci

Now, they aren’t disabling TLS v1.0, but you may be able to get a good idea of how all that might work from the examples there.

Here’s the trouble though – I’m not sure if it’ll work on your distro.

For example, here are the docs on how to configure all that in Postfix:

http://www.postfix.org/postconf.5.html#smtpd_tls_mandatory_protocols

They mention that TLS 1.1 and 1.2 is only available beginning with OpenSSL version 1.0.1, and the version provided with CentOS 5.x is openssl-0.9.8e.

However, you could always give it a try and see what happens :slight_smile:

-Eric