Client and server don't support a common SSL protocol

[rp.villanueva]

Hi,

I have setup a subdomain https://www.mission.wordinternational.org.uk/ via CNAME entry and have pointed the DNS to “ghs.googlehosted.com” as it is Google Site built page.

I have ensure that Cloudflare SSL is turned off as to not conflict with Google’s own SSL which is automatically applied for all Google site.

See error received when trying to open the site.

This site can’t provide a secure connection

site uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Unsupported protocol

The client and server don’t support a common SSL protocol version or cipher suite.

Anyone able to help what might be causing the issue?

Roldan

[sdayman]

@rp.villanueva

Cloudflare SSL is turned off

Yet it’s still an HTTPS url that’s proxied by Cloudflare. Cloudflare SSL will have to be enabled for this. But with a subdomain that deep, it needs a special ACM certificate. Or just don’t put ‘www’ in front of it.

Subdomain too deep

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.example.com, as these are one level below the root domain, example.com. The certificate will not cover www.sub…

[rp.villanueva]

@sdayman

Yet it’s still an HTTPS url that’s proxied by Cloudflare. Cloudflare SSL will have to be enabled for this. But with a subdomain that deep, it needs a special ACM certificate. Or just don’t put ‘www’ in front of it.

You were absolutely right! Issue was due to DNS proxy. I have disabled this just for the CNAME entry for the subdomain, and it has worked wonders!

Thank you so much.