Flexible SSL "uses an unsupported protocol" Error (ERR SSL VERSION OR CIPHER MISMATCH)

[isabungsu]

Hello I have a website with no SSL (Just port 80), and I want to proxy it through Cloudflare with Flexible SSL. But unfortunately I’m still unable to connect via https (connecting via HTTP works fine).
Here are some screenshots:
This is the error, that happens on other browsers and devices. So I don’t think it’s a caching thing?

The domain is proxied through Cloudflare

and Flexible SSL is enabled

I guess another unusual thing is that it is a wildcard subdomain that points to my server, but I don’t think that would matter because the Universal SSL just covers all subdomains?

[cherryjimbo]

Take a look here:

Community Tip - Fixing ERR SSL VERSION OR CIPHER MISMATCH in Google Chrome

Error Try the suggestions in this Community Tip to help you fix ERR SSL VERSION OR CIPHER MISMATCH in Chrome. Background A website using HTTPS performs a series of steps between the browser and the web server to ensure the certificate and SSL/TLS connection is valid. These include a TLS handshake, the certificate being checked against the certificate authority, and decryption of the certificate. If Chrome detects an issue, it might display “ERR_SSL_VERSION_OR_CIPHER_MISMATCH” which prevents a…

Looking at your example though, I think you’re trying to access a.b.example.com, which will not work. Certificates will only cover a single level of subdomains.

[isabungsu]

hmm okay, i kinda thought *.misa.pw means that it would also cover ..misa.pw and so on. Okay then, I guess ill just stay on http for now

[cherryjimbo]

It will cover x.misa.pw, y.misa.pw, etc. but not a.x.misa.pw, or b.y.misa.pw.

[isabungsu]

okay then. though i would’ve expected a certificate error and not an ssl protocol error.

[sandro]

In that case you have a security issue in the first place.

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…