I don’t know why this always jams me up but for some reason I can never find this setting when I’m setting up a new Apache2 conf. Well now I’ll remember:
nano /etc/apache2/mods-enabled/ssl.conf
This is where you edit CIPHERS and SSLProtocol versions. Save, restart Apache2, run through www.ssllabs.com, voila!