Hello everyone. My site started giving an error when opening: “ERR_SSL_UNRECOGNIZED_NAME_ALERT”.
- It’s working when I disable proxying
- I have other sites on the same server, connected to the CF same account, and they work fine. I already tried to apply the same configuration
- Turning off the SSL for 2 hours and turning “Full” on = no result
- Changing DNS, creating a new subdomain, changing the server = no result
My settings are:
SSL/TLS Recommender = OFF
Always Use HTTPS = ON
Minimum TLS Version = TLS 1.0
Opportunistic Encryption = OFF
TLS 1.3 = OFF
Automatic HTTPS Rewrites = ON
Certificate Transparency Monitoring ( Beta ) = OFF
Authenticated Origin Pulls = OFF
Universal SSL = On
“openssl s_client -connect oneq.su:443” result:
CONNECTED(00000003)
40F7F16AB97F0000:error:0A000458:SSL routines:(unknown function):tlsv1 unrecognized name:ssl/record/rec_layer_s3.c:1584:SSL alert number 112
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 313 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
“curl -iv oneq.su” result:
* About to connect() to oneq.su port 443 (#0)
* Trying 162.159.137.85...
* Connected to oneq.su (162.159.137.85) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12182 (SSL_ERROR_UNRECOGNIZED_NAME_ALERT)
* SSL peer has no certificate for the requested DNS name.
* Closing connection 0
curl: (35) SSL peer has no certificate for the requested DNS name.