I have: ssl_ciphers HIGH:!SSLv2:!MEDIUM:!LOW:!EXP:!RC4:!DSS:!aNULL:@STRENGTH; ssl_prefer_server_ciphers on; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; Yields: https://www.ssllabs.com/ssltest/analyze.html?d=rush.bluerosetech.com nginx 1.4.2 compiled against OpenSSL 1.0.1e 11 Feb 2013