苹果ATS验证问题

[javahio]

https访问网站没有问题，但是在做ATS检测时提示PFS（完全正向保密）（验证未通过），有朋友遇到过吗？
TOMCAT配置如下：
<Connector
protocol="org.apache.coyote.http11.Http11AprProtocol"
port="443" maxThreads="1024"
scheme="https" secure="true" SSLEnabled="true"
SSLCACertificateFile="/usr/local/tomcat/conf/ca.crt"
SSLCertificateFile="/usr/local/tomcat/conf/server.crt"
SSLCertificateKeyFile="/usr/local/tomcat/conf/server.pem"
SSLProtocol="TLSv1.2"
ciphers="TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,
TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,
TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA"
SSLCipherSuite="ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4" />

[javahio]

[javahio]

有没有解决过的小伙伴进来看看啊！~