fritex
June 15, 2021, 11:26pm
2
Regarding ERR_SSL_VERSION_OR_CIPHER_MISMATCH in Chrome and Firefox, it may mean that your Cloudflare certificate has not yet provisioned for a domain.
May I ask have you had an SSL certificate already installed at your host/origin server before moving to Cloudflare?
What SSL options have you got selected under SSL tab/settings page at your Cloudflare dashboard?
If you go to SSL/TLS > Edge Certificates in your Cloudflare dashboard, you may see the certificate showing the certificate as ‘Pending Validation’ rather than ‘Active’:
It can take up to 24hrs for the free Universal SSL certificate to provision, if it has been longer than that, try disabling and re-enabling Universal SSL to restart the process. More info and further steps to take in Community Tip - Fixing ERR SSL VERSION OR CIPHER MISMATCH in Google Chrome and Community Tip - Best Practices For Certificate Provisioning .
Troubleshooting · Cloudflare SSL/TLS docs
Archive This tutorial post covers the steps you should take if you have enabled Cloudflare, but HTTPS is not working on the site.
If your main domain is secure, but a subdomain is not, please see <a href="https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.">https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.</a>
1. Check that the DNS record is se…
An article to provide more information:https://support.cloudflare.com/hc/en-us/articles/200170566-Why-isn-t-SSL-working-for-my-site-
A good way to check how to propperly setup an SSL with Cloudflare here:
Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive This tutorial covers getting SSL working with Cloudflare in various different scenarios.
This assumes you already have your website set up on Cloudflare with all your DNS records set to
Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive SSL/TLS Configuration Video:
This tutorial covers basic settings in the SSL/TLS app of the Cloudflare Dashboard, including SSL Mode [Off/Flexible/Full/Full (Strict)], Cloudflare Origin Certificates, ‘Always Use HTTPS’ and ‘Automatic HTTPS Rewrites’.
The settings covered here can all be found by visiting <a href="http://Cloudflare.com">Cloudflare.com</a>, logging in, selectin…
Furthermore, if it could be due to a sub-domain being too deep , but …
Fix VERSION_OR_CIPHER_MISMATCH · Cloudflare SSL/TLS docs
Archive This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain.
The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with.
It will cover www.example.com and subdomain.exampl…
Below article could help too:
Error
Try the suggestions in this Community Tip to help you fix ERR SSL VERSION OR CIPHER MISMATCH in Chrome.
Background
A website using HTTPS performs a series of steps between the browser and the web server to ensure the certificate and SSL/TLS connection is valid. These include a TLS handshake, the certificate being checked against the certificate authority, and decryption of the certificate. If Chrome detects an issue, it might display “ERR_SSL_VERSION_OR_CIPHER_MISMATCH ” which prevents a…
Regarding ERROR 1001:
https://support.cloudflare.com/hc/en-us/articles/360029779472-Troubleshooting-Cloudflare-1XXX-errors#error1001
If you recently added your domain to Cloudflare and changed nameservers, or activated Cloudflare (
May I also ask are you using A or CNAME records?
1 Like
cloud) for a hostname(s), maybe you need to wait for some time due to DNS propagation time.