ERR_SSL_VERSION OR CIPHER_MISMATCH error

domain: cefrus.xyz

I’ve setup an Origin Certificate.
I’m not sure if I have to setup an Edge Certificiate but if I do, it has been on pending validation (txt) for idk how long. I’ve put the txt name and values in my cpanel dns, as it doesn’t let me to do it on my Cloudflare dns too.

I’ve tried searching for answers but I can’t figure it out still.

to keep my website running, i’ve disabled Cloudflare from the settings.

thanks.

Are you sure your domain is active in the first place?

You have a DNSSEC issue and should fix that first.

https://dnsviz.net/d/cefrus.xyz/dnssec/

Provide the values you received from Cloudflare to your registrar.

Hi, thanks for replying. I’ve tried fixing the problem but I’m not sure what to do as I’m not that experienced.
both dns on Cloudflare and cpanel are the same

It’s a DNSSEC issue, not about the records.

You need to update the values at your registrar.

1 Like

Ok, I enabled it through Cloudflare and now the errors on cefrus.xyz | DNSViz seem to have gone.

All right, now check the Overview page and if your domain is actually live on Cloudflare.

I’ve renabled Cloudflare. The website is now loading without errors but it still says it’s not protected. I have Origin CA setup on cpanel.

Seems to be live now, wait about half an hour.

Okay Thanks!!!
Will let you know if it is still not fixed!

Meanwhile still post a full page screenshot of https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates.

Certificate should have been issued by now.

I’d proceed with Community Tip - Fixing SSL ERROR NO CYPHER OVERLAP in Mozilla.

its pending


Did I do good by putting them in my cpanel dns zone. It didn’t let me put them in my Cloudflare dns.
edit: is it okay if i disable Cloudflare so my site can still be accessed? or does it have to be enabled for the system check to work?

No need to disable, but you can pause Cloudflare on the Overview screen.

oh my bad, ye that’s what I meant “Pause Cloudflare on site”. Thanks!!

The certificate should be issued now, so you can unpause.

Unpaused it now and the edge certificate is now approved

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.