Yes all:
apt update
apt upgrade
(choose Y)
Should I shut down my droplet when I do these upgrades?
Hello guys! Thanks again for all your help the other day. I’ve been pulling my hair out over this issue, but so far no luck.
I figured out why the “named groups” weren’t changing. The “ssl_prefer_server_ciphers on” directive in the nginx config was the culprit. The “ssl_ecdh_curve” directive changed the named groups once I changed “ssl_prefer_server_ciphers on” to "“ssl_prefer_server_ciphers off”. The main issue, however, still persists, even after installing another ssl certificate on the domain. So, apparently, this has nothing to do with LetsEncrypt.
I found another website that has the same issue (www.askubuntu.com). Been comparing the ssllabs test outputs between askubuntu.com and my domain. Again, I’m a total noob about these stuff, but the “named groups” is the only major difference that I can identify.
I was wondering/hoping that, now that we can edit the named groups, you might be able to help me narrow down the source of the problem?
Looking forward to hearing back from you. 
This is very unusual and unexpected.
I would try using just one, at a time, to see if any can resolve the problem.
One at a time, as in do something like "ssl_ecdh_curve secp521r1;", and if that doesn't work try "ssl_ecdh_curve secp384r1;" and so on?
Yes, exactly.
hi . im having the same issue, did you find out any solution to solve ?
[You should open a new topic]
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.