lukehoersten

ssl_certificate         cert.pem;
ssl_certificate_key     cert.key.pem;
ssl_trusted_certificate cert.ca.pem;
ssl_dhparam             cert.dh.pem;

ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers               FIPS@STRENGTH:!aNULL:!eNULL;
ssl_prefer_server_ciphers on;

ssl_session_cache   shared:SSL:10m;