nginx SSL config for good ssl labs test results

ssl_nginx

This is the Nginx config I use to get a good score on https://www.ssllabs.com/ssltest/index.html with my sites now.  Contact me on 
twitter @zedshaw if you have improvements for this.

server {
    listen 443 ssl default_server;
    server_name servername.com;

    ...
 
    ssl on;
    ssl_certificate /where/your/cert/at/server.crt;
    ssl_certificate_key /where/your/key/at/server.key;

    ssl_session_timeout 5m;
    ssl_session_cache  builtin:1000  shared:SSL:10m;

    ssl_prefer_server_ciphers on;
    ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers !aNULL:!LOW:!MD5:!EXP:RC4:CAMELLIA:AES128:3DES:SEED:AES256;
}