Fetch from AWS API Gateway fails from worker with Error 525 revealing the origin URL in error page

[sebastienlorber]

Has anyone found a solution? @lovasoa ?

This drives me mad for a few hours. Tried all the global/page SSL settings combinations possible (off, flexible, full, strict), no change.

CloudFlare workers fetch HTTPS works on workers.dev subdomain but not on own subdomain getting 525 error

Kenton Varda: (Note: The “SSL Handshake fail” error itself is actually a known bug in Workers, that happens when you try to talk to a host outside your zone using HTTPS but you have “flexbile” SSL set. We do not use flexible SSL when talking to domains other than your own, but there’s a bug that causes the request to fail instead of just using full SSL as it should.)

Can we get a public status on such a bug? Is it reasonable to expect it to be fixed now?

My domains:
https://cf.thisweekinreact.com/
https://this-week-in-react.pages.dev/

Code: https://github.com/slorber/this-week-in-react/blob/main/app/routes/index.tsx#L54

I just send a request to some https API:

async function subscribeToRevue({
  email,
  revueSecretKey,
}: {
  email: string;
  revueSecretKey: string;
}) {
  const REVUE_SUBSCRIBE_API = "https://www.getrevue.co/api/v2/subscribers";

  const revueFormData = new FormData();
  revueFormData.append("email", email);
  revueFormData.append("double_opt_in", "true");

  const result = await fetch(REVUE_SUBSCRIBE_API, {
    method: "POST",
    headers: {
      Authorization: `Token ${revueSecretKey}`,
    },
    body: revueFormData,
  });

  return result;
}

There’s nothing fancy being done, and it’s quite similar to your Egghead + Unsplash tutorial here: Expert led courses for front-end web developers. | egghead.io

This works fine in Wranger/dev. I also got this working on Vercel in 3 minutes, while I’m struggling for hours to make it work on CF. I really wanted to give a try CF workers but this is a pain atm and I think I’m just going to move back to Vercel

Looks related to:
https://tipsfordev.com/cloudflare-workers-fetch-https-works-on-workers-dev-subdomain-but-not-on-own-subdomain-getting-525-error

SSL Handshake issues with fetch

I have an issue that started yesterday, I’m now unable to connect to a specific end-point from within workers when doing a fetch request, but it works in dev and in the quick-edit. The SSL handshake fails, but why would it only fail in the worker? My code is un-changed, the target hasn’t changed anything either. Is there a problem with handling SSL handshakes? Any other @MVP that’s got any advice?

Worker works on workers.dev domain but not on own subdomain

I have a worker that does 3 things, all of which are proxies: Accessing /dataPlane will simply execute a fetch against a different URL (an analytics JS SDK) Acessing /sourceConfig requires an auth header to proxy some stuff POSTing to /v1/page or /v1/track , and a few others, passes on the posted body to the destiantion and returning that origin’s response I deployed it to the workers subdomain and as you can see here: https://rsp-production.financialflo.workers.dev/dataPlane it shows the JS …

Requests to Lets Encrypt ACME server failed with 525 Origin SSL Handshake Error

Hi. I am writing a Worker script that automates the process of ordering new certificates from Lets Encrypt via its ACME API and completing the DNS challenges. At first, the script requests https://acme-staging-v02.api.letsencrypt.org/directory to get a list of sub-service endpoints. The code can be simplified as: addEventListener('fetch', event => { event.respondWith(handleRequest(event.request)) }) /** * Respond to the request * @param {Request} request */ async function handleRequest(…

Error: Origin SSL Handshake Error (525)

Hello, I am encountering a strange error on my Worker, where I am consistently receiving a 525 error when fetching an external website: addEventListener('fetch', event => event.respondWith(fetch('https://deepl.com'))); Some notes: I have tried this on a fresh worker script without any routes associated with the script This happens both using wrangler dev and in production I have tried to disable caching with the cf object properties related to caching I have Full (Strict) SSL enabled on the…

Also can forward the log that API call returns:

# Error 525

Ray ID: 6d9eb373ca1b40b1 • 2022-02-07 18:32:27 UTC

## SSL handshake failed

You

### Browser

Working

Paris

### Cloudflare

Working

cf.thisweekinreact.com

### Host

Error

## What happened?

Cloudflare is unable to establish an SSL connection to the origin server.

## What can I do?

### If you're a visitor of this website:

Please try again in a few minutes.

### If you're the owner of this website:

It appears that the SSL configuration used is not compatible with Cloudflare. This could happen for a several reasons, including no shared cipher suites. [Additional troubleshooting information here.](https://support.cloudflare.com/hc/en-us/articles/200278659)

Cloudflare Ray ID: **6d9eb373ca1b40b1** • Your IP: 2a01:cb00:ca6:de00:59c3:19b8:ed3:9294 • Performance & security by [Cloudflare](https://www.cloudflare.com/5xx-error-landing)