Error on strapi backend, SSL issue?

[boriskamp]

Hi all!

I got a call from a customer of mine that part of their website is down. It seems al GraphQL calls return a 500 internal server error.

I tried to update the dependencies, restarted the server and got this error during deployment:

error: write EPROTO 140280638445504:error:1012606B:elliptic curve routines:EC_POINT_set_affine_coordinates:point is not on curve:../deps/openssl/openssl/crypto/ec/ec_lib.c:813:

The url is here https://strapi.birdblocker.com/admin

I have a custom cloudflare SSL cert on the server ever since I had this problem:

Random SSL 525 error

The SSL connection is failing due to a bad signature on the leaf certificate. I am not sure what might be the cause of this, and troubleshooting SSL issues unrelated to Cloudflare is outside the scope of this forum. You might benefit from generating and installing a Cloudflare Origin CA certificate. These are only valid for connections between Cloudflare and your origin, but the certificates can be set to last up to 15 years so you don’t have to deal with renewal. If an Origin CA certificate d…

And it was working great, until now.

Here is the SSL info:

root@vmi1284238:~# dokku certs:report website-strapi
=====> website-strapi ssl information
       Ssl dir:                       /home/dokku/website-strapi/tls
       Ssl enabled:                   true                     
       Ssl hostnames:                 *.birdblocker.com birdblocker.com
       Ssl expires at:                Jun  9 11:53:00 2038 GMT 
       Ssl issuer:                    C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
       Ssl starts at:                 Jun 13 11:53:00 2023 GMT 
       Ssl subject:                   subject=O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
       Ssl verified:                  self signed     

[boriskamp]

I have this in the server logs, might be useful:

Error: write EPROTO 139622319962048:error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL