[Pound Mailing List] Pound failing SSL Labs tests

Hi Guys,
I have just found out that for some very strange reason our build of Pound
is failing the SSL Labs tests for:
DROWN attack & OpesnSSL Padding Oracle vaulnerability (CVE-2016-2107)
this is happening even after we have taken the steps to resolve the issue.

# pound -V
starting...
detect_tproxy(): tproxy is is detected
tproxy: available
Version 2.7
  Configuration switches:
    --enable-cert1l
    --with-ssl=/usr/local/bin/openssl
    --with-maxbuf=4096
    --with-dh=2048
Exiting...


# more /etc/pound/pound.cfg
User        "nobody"
Group        "nobody"
LogLevel    0
Client        30
Timeout        60

ListenHTTPS
    # Label: pound1
    Address    192.168.63.70
    Port    443
    Cert    "/etc/loadbalancer.org/certs/server.pem"
    ReWriteLocation    1
    Ciphers
"ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES256-SHA:HIGH:!RC4:!MD5:!aNULL:!EDH"
    SSLHonorCipherOrder 1
    SSLAllowClientRenegotiation 0
    Disable SSLv2
    Disable SSLv3
    Disable TLSv1
    Disable TLSv1_1
    Service
        BackEnd
            Address    10.0.0.20
            Port    80
        End
    End
End

# /usr/local/bin/openssl version
OpenSSL 1.0.1t  3 May 2016

Does anyone have any ideas on what I can do try and resolve either of these
issues?

As a side note we also have both STunnel and HAProxy with SSL enabled on
different servers and they all pass with an A+ rating its just pound

~Ta
Scott

-- 
With Kind Regards.

Scott McKeown
Loadbalancer.org
http://www.loadbalancer.org
Tel (UK) - +44 (0) 3303801064 (24x7)
Tel (US) - +1 888.867.9504 (Toll Free)(24x7)