SSL handshake failure, but don't know why

What is the name of the domain?

thegodofkhaos.com

What is the error number?

525

What is the error message?

SSL handshake failed

What is the issue you’re encountering

Error page

What steps have you taken to resolve the issue?

Tested SSL cert installation, all showed installed correctly, only happens in Full (Strict) mode, which tells me it’s an issue with the origin server. But I can’t figure out what’s wrong, especially when DigiCert shows it’s installed correctly.

What is the current SSL/TLS setting?

Full (strict)

Can you change the record to DNS-Only for a moment?

Are you sure the error doesn’t happen in Full mode? Problems that don’t occur on Full but do on Full (Strict) should usually cause a 526 error.

I just tested it, and the issue occurs in Full mode as well. It was working originally before I had to restore my system and start fresh. I have the keys and certificates stored in /etc/ssl/. Does the organization of these files in specific folders matter, or is the current setup acceptable?

Additionally, I switched the record to DNS-Only.

Connection doesn’t work without the proxy either:

curl -svo /dev/null https://thegodofkhaos.com
* Host thegodofkhaos.com:443 was resolved.
* IPv6: (none)
* IPv4: (IP HIDDEN)
*   Trying (IP HIDDEN):443...
* Connected to thegodofkhaos.com ((IP HIDDEN)) port 443
* ALPN: curl offers h2,http/1.1
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
{ [5 bytes data]
* OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
* Closing connection

Connection via HTTP works however. Can you check that port 443 is open in your firewall and that your Apache is correctly configured for HTTPS?

Okay, after some tinkering, I’ve successfully enabled HTTPS and SSL seems to be working now. However, I’ve encountered another issue that I might need to look into elsewhere, as I’m fairly certain it’s an application-related problem rather than something with Cloudflare or SSL.

Something about not redirecting properly.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.