AnsweredAssumed Answered

How could I pass the SSL Server Test for my site with A Grade?

Question asked by Vilas Mankala on Jun 13, 2017
Latest reply on Jun 15, 2017 by Rob Moss

I have a virtual host site configured on two webservers with ELB as front facing. I have domain.bundle.crt and domain.key on my webservers under /etc/httpd/ssl. I have verified my site at ssllabs.com and got Grade B, so I went through the Criteria Categories through which the ssllabs gives the grade and got below values for my site

Protocol support: TLS 1.2   -  100% Key exchange: 2048 key private key length  -  90% Cipher Strength: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.128bit keys  -   80%

How could I improve the grade for my site from B to A.

I have followed the below guide as a part of troubleshooting

https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide

I
 have got the following results. What could I do to fix this?

Outcomes