Cannot get staging site to work with SiteGround host since I setup Cloudflare

[seth10]

Hello,

I’m currently using Site Ground as my host and got off their CDN and switched over to Cloudflare’s CDN. The production site works just fine; however, when I try to go to my staging site I am getting this error.

Secure Connection Failed
An error occurred during a connection to www.staging56.site.com. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

I tried adding in a configuration rule to turn off SSL in the event that I’m using my staging56.site.com, but that doesn’t seem to change anything.

Is there anyway to fix this?

Thanks!

[Chaika]

Cloudflare Free Plan, without Advanced Certificate Manager (ACM) or any other add-ons, only issues a “Universal SSL Certificate” which covers only the first level of subdomains. That is to say, staging56.site.com would be covered, but www.staging56.site.com wouldn’t.

From what you’ve described, it sounds like your site redirects you to the www subdomain (from staging56.site.com to www.staging56.site.com), so disabling SSL on staging56.site.com wouldn’t fix the issue.

You have a few options, it looks like SiteGround is a traditional host and issues you certificates for your domain. You could try gray clouding (disabling Cloudflare Proxy) on those records, but you would lose Cloudflare’s protections and other features. You could also buy Advanced Certificate Manager (ACM) which would let you issue a custom certificate for that domain. You could try disabling SSL via configuration rules based on hostname equals www.staging56.site.com, if nothing else works and you are ok with the risk of your staging site getting MITM’d & aren’t going to login to it or otherwise send private information to it.

For more information:

Community Tip - Fixing SSL ERROR NO CYPHER OVERLAP in Mozilla

Error Try the suggestions in this Community Tip to help you fix SSL ERROR NO CYPHER OVERLAP in Mozilla. Background A website using HTTPS performs a series of steps between the browser and the web server to ensure the certificate and SSL/TLS connection is valid. These include a TLS handshake, the certificate being checked against the certificate authority, and decryption of the certificate. If Mozilla detects an issue, it might display “SSL_ERROR_NO_CYPHER_OVERLAP” which prevents access to the…

[seth10]

@Chaika

ther features. You could also buy Advanced Certificate Manager (ACM) which would let you issue a custom certificate for that domain. You could try disabling

Thanks for your response!

It looks like the site gets redirected to https://www.staging56.site.com/ so in the configuration piece would I need to put in that URL or just www.staging56.site.com?

[Chaika]

I think gray clouding/disabling CF Proxy would be preferable to not having any SSL at all, but if you are fine with it, then yes you could try making a configuration rule matching hostname equals www.staging56.site.com

[seth10]

Doesn’t seem like that is working even after waiting 24 hours with the rule in place.

How would I go about the Gray Cloud?