SSL Server Test Rating

[Bashed]

Ran a test on Qualys SSL Labs and got a B rating.

DNS CAA = no
TLS 1.2 = yes (other TLS/SSL protocols = no)
Forward Secrecy = with some browsers

See attached. Would appreciate help on getting that A rating

My Settings:

SSL Cipher Suite:

ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

SSL/TLS Protocols = TLS 1.2

 

[Bashed]

Hmm...this tutorial actually worked and got me up to A+ rating

webdesires.co.uk/knowledge-base/getting-an-a-rating-on-the-qualys-ssl-test-on-all-cpanel-domains

 

[cPanelMichael]

Hello @Bashed,

Can you confirm if the information on the link below would have helped (prior to using the third-party instructions)?

PCI Compliance and Software Versions - cPanel Knowledge Base - cPanel Documentation

Thank you.

 

[sarhosting]

Hello @Bashed,

That was useful for getting a server to load for Safari 5.0 users. We knew it was possible since hight traffic sites like Amazon and YouTube loaded without issues so we kept searching until we ran into your post.