Just a little note before I forget about this neat site I found a little while ago. Mozilla has a wiki page about recommended SSL configuration on various web servers. They also have a site that will generate a configuration based on your compatibility preferences. Seems pretty useful!