ssl_certificate ssl/cybafelo.com.crt; ssl_certificate_key ssl/cybafelo.com.key; ssl_session_timeout 5m; ## Don't use SSL v3 because of POODLE vulnerability # ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES"; ssl_prefer_server_ciphers on;