Constant ERR SSL VERSION OR CIPHER MISMATCH error

[mathmanmo]

Hello,
I’ve been trying to setup an SSL certificate on my apache2 website and I’m constantly getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
My apache2 config is:

<VirtualHost *:443>

ServerAdmin website@gmail(dot)com
ServerName website(dot)com
ServerAlias www.website(dot)com
DocumentRoot /var/www/wordpress/
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

RewriteEngine on
RewriteCond %{SERVER_NAME} =website(dot)com [OR]
RewriteCond %{SERVER_NAME} =www.website(dot)com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

SSLEngine on
SSLCertificateFile /etc/cloudflare/website.com.pem
SSLCertificateKeyFile /etc/cloudflare/website.com.key
SSLCertificateChainFile /etc/cloudflare/origin_ca_rsa_root.pem

I have also used openssl to verifiy that my pem files are correct.
I have enabled the ssl mod on apache2 as well as allowed port 443.
I seriously cannot figure out what I’ve done incorrectly. Any ideas?

[sdayman]

@mathmanmo

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

If the site is Proxied by Cloudflare, then the Cloudflare certificate is the issue.

Community Tip - Fixing ERR SSL VERSION OR CIPHER MISMATCH in Google Chrome

Error Try the suggestions in this Community Tip to help you fix ERR SSL VERSION OR CIPHER MISMATCH in Chrome. Background A website using HTTPS performs a series of steps between the browser and the web server to ensure the certificate and SSL/TLS connection is valid. These include a TLS handshake, the certificate being checked against the certificate authority, and decryption of the certificate. If Chrome detects an issue, it might display “ERR_SSL_VERSION_OR_CIPHER_MISMATCH” which prevents a…

[1blas]

Can you make sure that Universal SSL is enabled for your zone?

Check your Cloudflare Dashboard - SSL/TLS > Edge Certificates > Scroll to bottom > Disable/Enable Universal SSL

[mathmanmo]

I can’t believe I had this disabled. Now unfortunately I have a too many redirects error. But it did fix the certificate error.

[domjh]

@mathmanmo

too many redirects error

First thing to check is that your SSL/TLS mode is Full (Strict), if it is, check the other suggestions here:

Community Tip - Fixing ERR TOO MANY REDIRECTS

Error Try the suggestions in this Community Tip to help you fix ERR TOO MANY REDIRECTS. Background If your SSL setting on the SSL/TLS app is Flexible and if your origin server is configured to redirect HTTP requests to HTTPS, server responses back to Cloudflare are encrypted. Since Cloudflare is expecting HTTP traffic, it keeps resending the same request, resulting in a redirect loop. This causes browsers to display “The page isn’t redirecting properly” or “ERR_TOO_MANY_REDIRECTS” errors. [D…

[mathmanmo]

Actually, just found out that it was a redirect in my apache site config. Everything works now! Thank you!

[1blas]

woohooo