CCS-scan probably, see https://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#ccs-early-changecipherspec-attack) what openssl-version do you use? cheers, mex Posted at Nginx Forum: http://forum.nginx.org/read.php?2,254144,254146#msg-254146