[Resolved] Error 525 SSL handshake failed

[cool_recep]

We started using Cloudflare but sometimes getting SSL handshake errors. Asked this to cloudflare and got this back:

Your SSL settings look fine and your origin supports an SSL connection, what appears to be happening is your origin server is resetting TCP connections during the SSL handshake, so the handshake fails and we present that error.

Here's a couple of recent examples from the log:

timestamp    message     upstream    count   host
2015-08-22T16:52:17.000+01:00   peer closed connection in SSL handshake (104: Connection res... https://185.85.189.43:443/sosyal/konu/technopat-capsleri-3.7... 1   www.technopat.net
2015-08-22T16:52:16.000+01:00   peer closed connection in SSL handshake (104: Connection res... https://185.85.189.43:443/sosyal/   1   www.technopat.net

I recommend sharing this with your hosts and have them troubleshoot this - it appears that something at your origin is resetting the TCP connection causing the handshake to fail.

I don't think that if my hosting company is experienced. So, I am asking for your help on the issue. Thanks.

 

[mistwang]

liteSpeed has SSL negotiation/renegoication protection, since all SSL traffic going though CloudFlare IPs, you may need to add cloudflare IP as trusted IP, or turn off SSL renegotiation protection. https://www.litespeedtech.com/docs/webserver/config/listeners#renegProtection

 

[cool_recep]

Host told me disabling Anti-DDoS protection of LSWS solved the issue. I think this is this setting they cahnged.