Obtain your certificate as described in OpenSSL#Certificates.
- Disable SSLv3 to prevent the POODLE attack.
- weakdh.org's Guide to Deploying Diffie-Hellman for TLS
- Mozilla's Server Side TLS article
- SSL Labs' SSL and TLS Deployment Best Practices
Programs to check TLS:
Websites to check TLS: