小编Jes*_*ski的帖子

https://www.ssllabs.com/ssltest/analyze.html?d=cablework.co

我不明白为什么它一直说“C”。我已禁用 SSLv3。

这是我的配置文件

server {
    listen 80;
    listen 443 ssl spdy;
    server_name cablework.co;
    ssl_certificate /etc/nginx/ssl/cablework.co.pem;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    return 301 https://www.cablework.co$request_uri;
}
server {
    listen 443 ssl spdy;

    ssl_certificate /etc/nginx/ssl/cablework.co.pem;
    ssl_certificate_key /etc/nginx/ssl/server.key;

    ssl_ciphers 'AES256+EECDH:AES256+EDH';

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_session_cache shared:SSL:10m;

    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.4.4 8.8.4.4 valid=300s;
    resolver_timeout 10s;

    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/nginx/ssl/dhparam.pem;

    charset utf-8;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found …