Steve Purcell

@silpol Well, yes, that can be an issue. But if the remote server isn't providing enough information for the client to logically connect the server's certificate to the client's root certificate, that's still a problem that can generally be reduced by configuring the server differently.

Re. @rtaprh's comment, with the current stable nginx versions it's no longer necessary to do the dhparam trick, and in fact it's downright discouraged.

For the benefit of future readers: using the explicit list of ciphers from the referenced SSL Labs article only got my site an overall "C" rating in SSL Labs' own tests, whereas the following much simpler alternative gets an "A":

ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";

Another thing you really want is Slate: https://github.com/jigish/slate

If you're using leiningen and lein-cljsbuild, you could probably also just set your inferior-lisp-program to "lein cljsbuild repl-rhino".

Or, if you're already using keychain to save your browser password for github, you can reuse it here by substituting the following command:

security find-internet-password -wgs github.com