The guys from bsdnow.tv did a great job by putting together a tutorial with some more details on a proper Nginx configuration and a very good choice for SSL parameters. There where some parts I didn't know neither and the tutorial is create as always.

If you want to …

If you run your ssl services like Email or internal Websites with self signed certificates you may want to get rid of the certification warning because your certificate is not signed by an official authority.

First generate a certificate which can be imported by Windows from your CA file:

openssl …