Why does it take a long time to establish a connection?

Question

Nginx

Good morning. Guys, such a problem. I decided to try to attach a certificate to the site on the network. Generated a certificate via openssl for CA. Generated another certificate (rsa:2048 sha256) and signed it with the previously generated one. The certificate of "certificate authority", added on machines. All is well, chrome says the connection is secure. The problem is that the first loading of the site is very long. As I understand it, at the moment when the check takes place.

ssl on;
ssl_certificate /ssl/glpi.crt;
ssl_certificate_key /ssl/glpi.key;
ssl_protocols       TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';
keepalive_timeout   70;

Here is the nginx config. What can be done about it, and why is this happening?

Answer 1

https://www.ssllabs.com/ssltest/analyze.html
check the connection is correct, there may be indications of incorrect ciphers
You can also get a ready-made config:
https://mozilla.github.io/server-side-tls/ssl- conf...