Resolved Error with Cloudflare SSL: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[apdapx10]

Hey!

I've been having a hell of a time connecting my free hosting to cloudflare in order to utilize their free SSL services. I've made the necessary dns changes, enabled universal ssl, and selected https rewrites - however, I'm still receiving the following message when trying to access my site:

- ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Any assistance to resolve this issue (from anyone), would be greatly appreciated.

Thanks in advance!

[mod edit -- merged into same post]

Hi Anna,
I'm currently having trouble connecting my site to Cloudflare in order to utilize their free SSL service. It appears that my hosting is still connecting to an x10 certificate, which appears to be creating a conflict with Cloudflare.

I assume there's a way to deactivate this in the x10 backend as it no longer works, however I can't seem to find that setting. Alternatively, is there any way you apply this change?

Thanks in advance!

 

[garrettroyce]

Your website works fine in SSL and non-SSL for me. Unless you are talking about a subdomain or private area that I can't access, you may just have a caching problem. Clear your browser's cache and try it again. If you still have an error, please let us know what domain you are talking about.

Also, for your main domain, consider redirecting non-SSL requests to SSL, to force all users to use encryption.

 

[apdapx10]

Hey! noticing now when i type the https url i'm getting "Apache is functioning normally".

 

[apdapx10]

Not sure why - this was all functioning normally about an hour ago. Now the x10 certificate returns unless i deactivate "ssl enabled", at which point i can only achieve the apache is functioning normally status, despite having cloudflare's ssl activated. This is so confusing! haha

 

[garrettroyce]

Don't use the "ssl enabled" button. It assumes you're using the builtin SSL function. But, you're actually not using SSL; you're using non-SSL and CloudFlare is proxying your website and users are connected via SSL to the proxy.

Make sure your files are in ~/domains/[your domain]/public_html . Anything in private_html is SSL only (again, x10 SSL, not CloudFlare). Also make sure DirectAdmin is choosing the right path for your domain.

 

[Anna]

Do not set force SSL in your account here, recall reading on CloudFlare that having that set on host level could cause a problem.

I don't see any errors at all on either of your two domains right now.

Ps. having SSL enabled is absolutely possible, make sure to check that "private_html setup" is set to use symbolic link to public_html to have the same content on both https and http, it will use the server cert however. Having it enabled will allow for encrypted connection between CloudFlare and x10hosting. It is however important to set CloudFlare to use flexible for that to work.

 

[apdapx10]

That's bizarre - I'm seeing Apache is functioning normally when I try to visit https.
I'll give that private_html thing a try. I've currently got it set to flexible, so that shouldn't be the issue.

I deactivated SSL under "Edit Domain" in my admin. Is there another setting I need to deactivate, or is that checkbox you're referring to when you refer to the "Force SSL" setting?

 

[Anna]

That *should* deactivate the forced (if you ever enabled it but I'm guessing you did not as you don't know where it is), but it is actually a separate setting a bit further down on that page that is only visible with SSL enabled.

Have you tried another browser, or forcing reload without browser cache (most cases that is holding ctrl and hitting f5).

 

[apdapx10]

It now appears to be fine! Thanks for the info that you could see it - that made me refresh my cache for what feels like the 100th time in the last two days, and voila - success on my cpu, mobile, and everything else.

Please feel free to close this topic - and thanks again!

 

[Anna]

Great, I'll mark this as resolved then.

Feel free to contact us if you need any other assistance.