> add-apt-repository ppa:nginx/stable I don't think this is a good idea. It's a bit unclear on their wiki[1] but they have an official repository maintained by

> add-apt-repository ppa:nginx/stable I don't think this is a good idea. It's a bit unclear on their wiki[1] but they have an official repository maintained by nginx.org deb http://nginx.org/packages/ubuntu/ lucid nginx deb-src http://nginx.org/packages/ubuntu/ lucid nginx (substitute your Ubuntu version for lucid, obviously) and separately the PPA you're using but "this PPA is maintained by volunteers and is not distributed by nginx.org." How committed are those volunteers? Do you want to find out on your server? The official repository carries nginx 1.4.2 (I use it with raring) which works with at least TLS 1.1 (that's what Chrome tells me about the connection). EDIT: Qualsys gives my setup an A, with a pat on the back for supporting forward secrecy and a warning that I'm vulnerable to the BEAST attack. Apparently, I also support TLS 1.2, what do you know. [1] http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packages http://wiki.nginx.org/Install#Official_Debian.2FUbuntu_packa...