Thank you it worked. I actually had tried it before, and it didn't work for me originally. I have 2 certs, and in my second ListenHTTPS I was allowing SSLv2. The second "Ciphers" directive was overriding the first one. I guess this should be put in the man page for future reference.

Ondra Kudlik wrote:

I think you have been looking for Ciphers "acceptable:cipher:list",
just use same format as openssl (see man 1 ciphers). It is in pound
documentation...

Regards,