I run a small e-commerce website hosted on a dedicated server with Debian 6 Squeeze.
I need to become PCI compliant (the card industry standard for security).
Therefore I have registered with TrustWave TrustKeeper which scans my site for potential security vulnerabilities.
The scan reported plenty of vulnerabilities and I need to upgrade PHP (which I did) and Apache. The issue is that the Apache version which is recommended is not available for Debian 6.
It's becoming a nightmare to fix all the reported issues.
Are you aware of a Distribution that would be pre-configured to be PCI compliant ? Some kind of perfect settup with Apache/MySQL/PHP/SSL/eMail: IMAP & SMTP-SSL.
Thanks for your help.