I've spent 4 days trying to get a decent score, nothing I change in my nginx config file seems to make a difference.
I'm getting an F grade with the following confusing results:
Insecure cipher suite warning. This is the suite in my config:
1024bit DH Weak warning. I'm using a 4096bit DH param.
Test says I'm not using OCSP stapling but it's in my config.
Test says "RC4 Yes", but it is explicitly disabled in my ciphers above.
What am I missing?