{"action":"created","issue":{"url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/290","labels_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/290/labels{/name}","comments_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/290/comments","events_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/290/events","html_url":"https://github.com/ssllabs/ssllabs-scan/issues/290","id":124554787,"number":290,"title":"Handshake Simulation, loads of \"protocol or cipher suite mismatch\"","user":{"login":"tiferrei","id":8849915,"avatar_url":"https://avatars.githubusercontent.com/u/8849915?v=3","gravatar_id":"","url":"https://api.github.com/users/tiferrei","html_url":"https://github.com/tiferrei","followers_url":"https://api.github.com/users/tiferrei/followers","following_url":"https://api.github.com/users/tiferrei/following{/other_user}","gists_url":"https://api.github.com/users/tiferrei/gists{/gist_id}","starred_url":"https://api.github.com/users/tiferrei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tiferrei/subscriptions","organizations_url":"https://api.github.com/users/tiferrei/orgs","repos_url":"https://api.github.com/users/tiferrei/repos","events_url":"https://api.github.com/users/tiferrei/events{/privacy}","received_events_url":"https://api.github.com/users/tiferrei/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-01-01T18:23:58Z","updated_at":"2016-01-01T20:12:32Z","closed_at":null,"body":"Hello, I was able to optimise my web server to an A+, but now I get loads of \"protocol or cipher suite mismatch\", am I being to strict? Also, now that I have the A+, how can I get 100% on the Protocol Support, Key Exchange and Cipher Strength?\r\n\r\nwebsite: tiferrei.com\r\n\r\nThank you,\r\ntiferrei\r\n\r\n![screen shot 2016-01-01 at 18 22 31](https://cloud.githubusercontent.com/assets/8849915/12071760/a765f560-b0b4-11e5-92bd-5f67867ce2e4.png)\r\n\r\n[SSL Server Test: tiferrei.com.pdf](https://github.com/ssllabs/ssllabs-scan/files/75994/SSL.Server.Test.tiferrei.com.Powered.by.Qualys.SSL.Labs.pdf)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/comments/168335433","html_url":"https://github.com/ssllabs/ssllabs-scan/issues/290#issuecomment-168335433","issue_url":"https://api.github.com/repos/ssllabs/ssllabs-scan/issues/290","id":168335433,"user":{"login":"selecadm","id":10382329,"avatar_url":"https://avatars.githubusercontent.com/u/10382329?v=3","gravatar_id":"","url":"https://api.github.com/users/selecadm","html_url":"https://github.com/selecadm","followers_url":"https://api.github.com/users/selecadm/followers","following_url":"https://api.github.com/users/selecadm/following{/other_user}","gists_url":"https://api.github.com/users/selecadm/gists{/gist_id}","starred_url":"https://api.github.com/users/selecadm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/selecadm/subscriptions","organizations_url":"https://api.github.com/users/selecadm/orgs","repos_url":"https://api.github.com/users/selecadm/repos","events_url":"https://api.github.com/users/selecadm/events{/privacy}","received_events_url":"https://api.github.com/users/selecadm/received_events","type":"User","site_admin":false},"created_at":"2016-01-01T20:12:32Z","updated_at":"2016-01-01T20:12:32Z","body":"> but now I get loads of \"protocol or cipher suite mismatch\", am I being to strict?\r\n\r\nTLS 1.0 is disabled.\r\n\r\n> how can I get 100% on the Protocol Support\r\n\r\nDisable TLS 1.1 also.\r\n\r\n> Key Exchange\r\n\r\nObtain new certificate with 4096-bit RSA key, use 4096-bit Diffie-Hellman parameters and 384-bit elliptic curve (secp384r1).\r\n\r\n> Cipher Strength\r\n\r\nThis must not be 100%. Standards say 128-bit encryption must be supported."}}