Despite all I've tried, I cannot figure out why my site is now throwing a 525 error

[jake38]

What is the name of the domain?

countrpt.io

What is the error number?

525

What is the error message?

It appears that the SSL configuration used is not compatible with Cloudflare. This could happen for a several reasons, including no shared cipher suites. Additional troubleshooting information here.

What is the issue you’re encountering

I woke up today and found my company’s site was throwing a 525 error for the main domain and other related domain names that were all resolving to the main domain. I can ping all the domains. I have tried everything including changing SSL to Flexible, turning off redirect rules, etc, but to no avail. This happened a few months ago and I needed to reinstall a cert, which worked. I did the same thing this time, but it’s not working. Any help is appreciated.

What steps have you taken to resolve the issue?

Disabled and re-enabled all previous settings; reinstalled certs, ping/curl, changed various configs that were previously working; deleted/re-added DNS records with varying options (DNS vs Proxied); tried various browsers; changed SSL encryption modes.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Go to countrpt.io and it’s supposed to resolve to https://www.countrpt.io

[fritex]

@jake38

Go to countrpt.io and it’s supposed to resolve to https://www.countrpt.io

Apparently, it does and works fine from me end and testing.
Both non-www and www DNS records return a proxied Cloudflare IP address and non-www is redirecting to www.

Did you solved the issue in the meantime?

$ curl -I http://countrpt.io
HTTP/1.1 301 Moved Permanently
Date: Fri, 03 Jan 2025 14:21:33 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 03 Jan 2025 15:21:33 GMT
Location: https://www.countrpt.io

[jake38]

Yeah, it’s all working for and everyone else, too. I literally reset every relevant config and then just waited. Thanks for your help!