Free SSL Certificate on Subdomain broke the custom domains. Getting 525 SSL Handshake errors from CF

[Devarsh]

Website URL

www.dkb.si

Error Message

Error 525 - SSL Handshake Failed

Other Information

I have both live and installed SSL on the origin and CF is proxying everything that it can. (all the dkb.si paths). But the CF can’t reach to origin server.

[blueking]

I second this issue on my custom domain (dmalsan.com).

While the announcement does not state any direct changes to the SSL of custom domains, this issue seems to be related since it has happened at the same time as this big change in SSL certificates.

[xcroma]

Ok I fixed my site by doing this:

1. In CloudFlare SSL Overview, switch from Full to Flexible.
2. In CloudFlare SSL Edge Certificates, disable Always Use HTTPS.
3. If you have ‘force https:// prefix’ code in your htaccess, remove that as well.

I had to do all 3 to get it the site to work. The site does still redirect http to https despite doing all that.

[Devarsh]

Not working, getting 403 forbidden now. I did -

• Switched from full to flexible on CF
• disable all the HTTPS settings on CF
• and I don’t have any force https code in my htaccess.

But now I am getting the 403 error when trying to access the site.

[Devarsh]

The point is, our config with CF was working fine before the Free SSL change, so we shouldn’t be doing any of these stuff. Maybe the infinityfree devs should look into this issue. The config with CF and custom domain was working fine with all the full SSL and HTTPS settings before the update.

[Admin]

I responded to this issue in the official announcement:

@Admin

Regarding everyone who has Cloudflare errors, I checked some of your domains and I see all of them either do not have an SSL certificate installed, or the installed SSL certificate has expired.

Looking at the number of reports, it might be possible that something went wrong on the hosting side resulting in the SSL certificate being removed or an old certificate being moved back in.

In any case, you can fix it yourself by simply reinstalling your latest SSL certificate.

However, I propose we continue this discussion here.

[ykz123]

I see that your website is up now, could you please tell me what did you do to solve the issue? i still has the 525 issue. When i switch to flexible config in CF, i get the “certificate not trusted” error.

[wasik405]

To solve it, try following the steps in the post the admin quoted right above your post.

[ykz123]

I already requested ssl certificates 4 times, and still I have the same issue

[Admin]

@ykz123

and still I have the same issue

Do you? Because the screenshot shows a completely different issue.

The screenshot shows a ERR_TOO_MANY_REDIRECTS error. I checked your domain name, and there is a valid Let’s Encrypt certificate installed too.

Could you please verify that your website is actually configured to use “Full” SSL mode (or “Full (strict)”) in Cloudflare? If it uses Flexible SSL, that tends to cause issues with website that aren’t setup to deal with Flexible SSL (not to mention that you wouldn’t even be using the SSL certificate at all).

[blueking]

I would just like to say that my problem resolved itself today and I didn’t have to touch the SSL settings at all so uh good luck guys! I guess the issue just worked itself out on its own