Fatal alert handshake failure

[ssubramani]

The site loads fine on browser but having issues when i use java 11. So i ran following command and got same hand shake failure on openssl client as well

openssl s_client -connect repo.qa-guidedchoice.com:443
CONNECTED(00000003)
139939542529936:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:769:

no peer certificate available

No client certificate CA names sent

SSL handshake has read 7 bytes and written 289 bytes

New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
Start Time: 1541452642
Timeout : 300 (sec)
Verify return code: 0 (ok)

[sandro]

Cloudflare depends on SNI, so you also need to specify the server name

openssl s_client -connect repo.qa-guidedchoice.com:443 -servername repo.qa-guidedchoice.com

[ssubramani]

Fixed the issue i had with java by upgrading gradle to use new apache http client . Thanks for pointing me to SNI.