---
---

ssl_session_timeout 5m;

ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers 'kRSA';
ssl_prefer_server_ciphers on;