mongoose scores A- on the SSLlabs test, but only as long as SSLv3 is manually disabled. (Both SSLv2 and SSLv3 are no longer considered secure). (Test run on centos6 with stock openssl).
I use this code:
diff --git a/src/mongoose6.c b/src/mongoose6.c
index a9fd835..a6f3e07 100644
@ const char *mg_set_ssl(struct mg_connection *nc, const char *cert,