blocks|key|4403728|text|将Cloudflare+SSL/TLS加密模式更改为Flexible。这对我很管用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4403729|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Change Cloudflare SSL/TLS encryption mode in to Flexible. it worked for me.

blocks|key|5819478|text|525错误表示CloudFlare无法联系您的源站并与其创建SSL连接。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5819479|这可能是由于：|5819480|5819481|您的服务器没有匹配或兼容的SSL密码|unordered-list-item|5819482|您的网站可能没有正确安装证书|5819483|您的网站可能没有专用IP或未配置为使用SSL|5819484|5819485|请尝试联系您的主机提供商以获得帮助，以确保您的SSL证书设置正确。如果您使用的是控制面板，快速谷歌搜索可以帮助您找到该控制面板的安装指南。|5819486|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|S|8|@]|9|@]|A|$]]|$1|E|3|F|5|G|7|T|8|@]|9|@]|A|$]]|$1|H|3|I|5|G|7|U|8|@]|9|@]|A|$]]|$1|J|3|K|5|G|7|V|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|W|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|X|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|P|$]]

A 525 error indicates that CloudFlare was unable to contact your origin server and create a SSL connection with it. 

This can be due to:

<ul>
<li>Your servers not having matching or compatible SSL Ciphers</li>
<li>Your website may not have a certificate installed properly</li>
<li>Your website may not have a dedicated IP OR is not configured to use <a href="https://en.wikipedia.org/wiki/Server_Name_Indication" rel="nofollow">SNI</a></li>
</ul>

Attempt to contact your hosting provider for assistance to ensure that your SSL certificate is setup correctly. If you are using a control panel, a quick google search can help you find a install guide for that said control panel.

blocks|key|4403806|text|访问Cloudflare中的SSL/TLS选项卡。然后：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4403807|4403808|将您的SSL/TLS加密模式切换为灵活。|ordered-list-item|4403809|请确保打开“边缘证书”选项卡下的“始终使用HTTPS”。|4403810|4403811|📷|atomic|offset|length|4403812|​|4403813|这将自动将您的所有请求从Http传输到Https。如果您将在托管服务器上实现自定义SSL证书，则此525错误将自动消失，而不会更改Cloudflare上的任何内容。|4403814|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/8beb6b056606d471c42efc216c0745a1.png|imageAlt^0|0|0|0|0|0|0|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|11|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|12|8|@]|9|@]|A|$]]|$1|F|3|G|5|E|7|13|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|14|8|@]|9|@]|A|$]]|$1|I|3|J|5|K|7|15|8|@]|9|@$L|16|M|17|1|18]]|A|$]]|$1|N|3|O|5|6|7|19|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1A|8|@]|9|@]|A|$]]|$1|R|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|S|$T|$5|U|V|W|A|$X|Y|Z|-4]]]]

Visit SSL/TLS tab in Cloudflare. Then:
<ol>
<li>Switch Your SSL/TLS encryption mode to Flexible.</li>
<li>Make sure to switch On &quot;Always Use HTTPS&quot; under &quot;Edge Certificate&quot; tab.
<a href="https://i.stack.imgur.com/zdUJK.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/zdUJK.png" alt="enter image description here" /></a></li>
</ol>
This will transfer all your request from Http to Https automatically. And if you'll implement custom SSL certificate on your hosting server then this 525 error will automatically disappear without changing anything on Cloudflare.

blocks|key|4403715|text|几天前也遇到了同样的问题。我们的DevOps联系了支持人员，发现Cloudflare以这种方式更改了证书类型或smth。要求把所有东西都还回去。这很有帮助。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4403716|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Got the same problem a few days ago. 
Our DevOps contacted support and found out that Cloudflare changed certificate type or smth in that way. Asked to return everything back. 
That helped.

blocks|key|5819551|text|我今天经历了同样的问题，发现(至少在我的例子中)是缺少TLS+v1.3|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5819552|我刚刚做了一个服务器，使用nginx+%2B+php-fpm和一个自签名的ssl来使用下面的CloudFlare代理。|5819553|当我从生产服务器切换到这个新服务器时，它给出了错误525。|5819554|我给出了命令：curl+-I+https://your_server_public_ip/，它返回了错误：|offset|length|style|CODE|5819555|error:+1408F10B:+SSL+routines:+ssl3_get_record:+wrong+version+number|code-block|syntax|javascript|5819556|此错误在CloudFlare社区中有描述，网址为：https://community.cloudflare.com/t/community-tip-fixing-error-525-ssl-handshake-failed/44256|5819557|他们建议在CloudFlare面板上关闭TLSV1.3，但我决定尝试安装它。|5819558|使用nginx是如此简单，以至于我不知道为什么要关闭它。|5819559|只需在你的nginx/snippets/ssl-params.conf文件(默认的Ubuntu20和18)中添加TLSv1.3+->+ssl_protocols+TLSv1.2+TLSv1.3;就可以了，这样你仍然可以使用最新和最安全的协议。|5819560|entityMap|0|LINK|mutability|MUTABLE|url|https://community.cloudflare.com/t/community-tip-fixing-error-525-ssl-handshake-failed/44256^0|0|0|0|7|12|0|0|P|2K|0|0|0|0|5|U|1V|U|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|18|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|19|8|@$H|1A|I|1B|J|K]]|9|@]|A|$]]|$1|L|3|M|5|N|7|1C|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1D|8|@]|9|@$H|1E|I|1F|1|1G]]|A|$]]|$1|S|3|T|5|6|7|1H|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|1I|8|@]|9|@]|A|$]]|$1|W|3|X|5|6|7|1J|8|@$H|1K|I|1L|J|K]|$H|1M|I|1N|J|K]]|9|@]|A|$]]|$1|Y|3|-4|5|6|7|1O|8|@]|9|@]|A|$]]]|Z|$10|$5|11|12|13|A|$14|15]]]]

I went through the same problem today and found that (at least in my case) it was the lack of TLS v1.3

I had just made a server using nginx + php-fpm and a self signed ssl to use below CloudFlare proxy.

When I switched from the production server to this new one, it gave error 525.

I gave the command: <code>curl -I https://your_server_public_ip/</code> and it returned the error:

<pre><code>error: 1408F10B: SSL routines: ssl3_get_record: wrong version number
</code></pre>

This error is described in the CloudFlare community at:
<a href="https://community.cloudflare.com/t/community-tip-fixing-error-525-ssl-handshake-failed/44256" rel="nofollow noreferrer">https://community.cloudflare.com/t/community-tip-fixing-error-525-ssl-handshake-failed/44256</a>

There they advise turning off TLS v1.3 on the CloudFlare panel, but I decided to try installing it.

Using nginx is so easy that I don’t know why to have it shut down.

Only add TLSv1.3 like this-> <code>ssl_protocols TLSv1.2 TLSv1.3;</code> in your <code>nginx/snippets/ssl-params.conf</code> file (default Ubuntu 20 and 18) that will work and you still use the latest and most secure protocols.

I switched with my Domain to Cloudflare and now I'm trying to use CloudFlare's SSL Feature.

I already own a SSL cert from StartSSL so I would be possible to set the settings to 'Full (Strict)' but I don't want to so I turned it to 'Full'.

Now I'm getting 525 Errors, after a 'Retry for a live Version' everything is okay. 
But I'm getting this Error everytime.

Has anyone an idea ?

Thank you

<a href="http://i.stack.imgur.com/zCOKb.png" rel="noreferrer">Picture of my Error</a>

Cloudflare - 525 SSL handshake failed

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我将我的域切换到了Cloudflare，现在我正在尝试使用CloudFlare的SSL功能。我已经拥有来自StartSSL的SSL证书，所以我可以将设置设为'Full (Strict)‘，但我不想这样做，所以我把它设为'Full’。现在我收到了525个错误，在“重试一个活动版本”之后，一切正常。但我每次都会收到这个错误。有谁有主意吗？谢谢

问Cloudflare - 525 SSL握手失败
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Cloudflare - 525 SSL握手失败EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Cloudflare - 525 SSL握手失败
EN