Configuring SSL can be a really tricky juggle between security, performance and compatibility.

Mozilla has published a wizard-like SSL configuration generator that supports various web servers (Nginx and Apache included) and OpenSSL versions, with different presets for old, intermediate or modern-only browser compatibility.