It starter today 525 error. no changes on the website was made

[angel6]

What is the name of the domain?

eplaneai.com

What is the error number?

525

What is the issue you’re encountering

error 525

What steps have you taken to resolve the issue?

reconnected the domain, changed different settings and still same.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

[fritex]

@angel6

reconnected the domain, changed different settings and still same.

@angel6

Full (strict)

May I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

How about your SSL certificate at the origin host? Was the origin SSL certificate renewed and is it valid?

Please double-check your SSL certificate at the origin host and adjust the SSL/TLS option at Cloudflare dashboard accordingly.

Does it work fine over HTTPS with a valid SSL certificate once Cloudflare is Paused temporary?

1. Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
2. The link is in the lower right corner of that page.
3. Give it five minutes to take effect, then make sure site is working as expected with HTTPS without any error
4. Check with your hosting provider / Plesk panel / cPanel AutoSSL / Let’s Encrypt / ACME / Certbot and manually click to renew it
5. Only then, when your website responds over HTTPS, you should un-pause Cloudflare and double-check your SSL/TLS setting to make sure it’s set to Full (Strict).

@angel6

525

May I ask what troubleshooting steps related to the 525 error you’re experiencing have you tried already?

Community Tip - Fixing Error 525: SSL handshake failed

Error Try the suggestions in this Community Tip to help you fix Error 525: SSL handshake failed. Background Error 525 indicates that the SSL handshake between Cloudflare and the origin web server failed. This only occurs when the domain is using Cloudflare Full or Full (Strict) SSL mode. This is typically caused by a configuration issue in the origin web server, when this happens, you’ll see “Error 525: SSL handshake failed”. [Screen Shot 2022-01-27 at 12.55.03 PM] Quick Fix Ideas If you…

Troubleshooting Cloudflare 5XX errors · Cloudflare Support docs

[sdayman]

Your origin’s SSL for the apex hostname is fine, but www is broken on Port 443:
* LibreSSL/3.3.6: error:1404B438:SSL routines:ST_CONNECT:tlsv1 alert internal error

[angel6]

I got also response from Cloudflare to setup as Flexible so it does not go through 443 port and still same thing. I use Webflow here and besides some spike today in requests - no other changes were made for months. What could that be? all I want the site to be up again

[sdayman]

That’s not going to work, because Flexible will make an HTTP request to the origin, but your origin is redirecting to HTTPS.

You need to fix the origin server. To make troubleshooting easier, you should set your DNS record for www to DNS Only. Then ask your web host for assistance.