How to fix issue "Error 525: SSL handshake failed"

My site got the error “SSL handshake failed” recently. When I refresh it sometimes it works sometimes it doesn’t

Due to the 525 error, kindly, may I ask have you checked within the steps from below articles regarding this error showing up for your Website as it’s obviously you are having a situation where:

  1. The origin host for your domain does not work over HTTPS
  2. The SSL certificate is not being installed or is not a valid one for your domain
  3. Wrong SSL option being selected in Cloudflare dashboard on SSL/TLS tab
  4. Possible use of a port for your app on your domain which is not compatible and supported with Cloudflare while using :orange: cloud (proxy mode) for that hostname (DNS record)

May I ask, before moving to Cloudflare, was your Website working over HTTPS and have you had an valid SSL certificate installed at your host/origin server for your Website?

Moreover, may I ask which SSL option have you got selected under the SSL/TLS tab of Cloudflare dashboard for your domain? (Flexible, Full, Full strict …)

Here is a way to re-check if you correctly setup the SSL for your domain with Cloudflare:

If any other issues appear, follow the needed steps for troubleshooting from article below:

Regarding available SSL options at Cloudflare dashboard, check here:

In case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare CA Origin Certificate:

Last but not least, kindly have a look here for more information regarding correct SSL settings:

Ports list compatible and supported when using :orange: cloud (proxy mode) on Cloudflare can be found here:

Furthermore, kindly re-check if Cloudflare is allowed to connect to your origin host to as follows in the below article:

Nevertheless, Cloudflare IP addresses list can be found here:

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.