SSL configuration used is not compatible with Cloudflare

Website, Application, Performance DNS & Network
1

What is the name of the domain?

‘sevenmilefarm.com’

What is the error number?

525

What is the error message?

SSL handshake failed It appears that the SSL configuration used is not compatible with Cloudflare.

What is the issue you’re encountering

domain name is not resolving to website

What steps have you taken to resolve the issue?

toggled back and forth from full strict, full and automatic SSL options in cloudflare.
I have also verified that I do not have an SSL assigned on the server.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

visit ‘sevenmilefarm.com’

Screenshot of the error

CloudFlareSevenMileFarm.jpg
CloudFlareSevenMileFarm.jpg1386×912 134 KB

2

Using Cloudflare SSL to front a non-SSL origin is not secure. Make sure your origin has a valid SSL configuration (you can use LetsEnrypt for free certificates, or a Cloudflare origin certificate - requires the proxy), set Cloudflare SSL/TLS to “Full (strict)” and then your users are fully protected.

1 Like
3

I am sorry, I am confused.

  • Make sure your origin server has a valid SSL Configuration
    You can use Lets Encrypt for free or
    Cloudflare origin certificate

I am working very hard to do everything in this new environment with best practices.
Which is the best practice

  1. Add Certificate on the server - IONOS Web Hosting Plus offers a free SSL Starter Wildcard
    or
  2. Set Cloudflare to Full (strict)

I believe I had already set cloudflare to Full Strict and also had an issue but I will set that now and update this ticket with result.

4

You need to do both, see here…

1 Like
5

I have verified that the setting is now full strict and that it was last changed 2 hours ago and I still have the same error 525 SSL Handshake Failed.

Maybe I am confused. Do I need the SSL set up on the server and also set to full strict on Cloudflare?

6

Yes…

1 Like
7

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.