=== Online checkers ===
[[https://ssldecoder.org]]
[[https://www.ssllabs.com/ssltest/index.html]]

=== Howtos ===
[[https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html|Strong SSL Security on nginx]]\\
[[https://mozilla.github.io/server-side-tls/ssl-config-generator/|Mozilla SSL Configuration Generator]]\\

=== Unique DH params ===
Howto and online test for weak DH params:
[[https://weakdh.org/sysadmin.html|Guide to Deploying Diffie-Hellman for TLS]]

<code>
cd /etc/ssl/certs
openssl dhparam -out dhparam.pem 4096
</code>