SSL settings that score high on Qualys ssl check…

sample_ssl.conf

    ssl_session_cache shared:SSL:10m;

    server_name  <name>;

    ssl                  on;
    ssl_certificate      <path to concatenated certificate chain>;
    ssl_certificate_key  <path to certificate private key>;
    ssl_dhparam		       <path to dh params>;
    
    ssl_session_timeout  5m;

    ssl_protocols SSLv3 TLSv1.2 TLSv1.1 TLSv1;
    ssl_ciphers  EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
    ssl_prefer_server_ciphers   on;
    # staple certificates with the OCSP response
    ssl_stapling on;
    
    # strict transport security - browsers redirect themselves to https during 
    # the next <max-age> seconds.
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";