Cloudflare error code ssl_error_no_cypher_overlap

Wondering how to resolve cloudflare error code ssl_error_no_cypher_overlap? We can help you.

At Bobcares, we offer solutions for every query, big and small, as a part of our Server Management Service.

Let’s take a look at how our Support Team assist with cloudflare error.

How to resolve cloudflare error code ssl_error_no_cypher_overlap?

Typically, error looks as shown below:

Error : SSL ERROR NO CYPHER OVERLAP

A website using HTTPS performs a series of steps between the browser and the web server to ensure the certificate and SSL/TLS connection is valid.

These include a TLS handshake, the certificate being check against the certificate authority, and decryption of the certificate.

If Mozilla detects an issue, it might display “SSL_ERROR_NO_CYPHER_OVERLAP” which prevents access to the site.

Some common causes for this error:

• Firstly, your SSL hasn’t verify by our SSL vendors yet.
• Something has gone wrong with the issuance of the SSL cert, or our vendors have put an additional security check in place before issuing the certificate.
• Next, your DNS Records on the Cloudflare dashboard are ‘grey-clouded’ and you are bypassing our proxy.
• For Cloudflare to present our certificates you need to pass through an ‘orange-clouded’ DNS record.
• Finally, cloudflare SSL only applies up to first level subdomains.

Today, let us see the steps followed by our Support Techs to fix it:

1. Grey-cloud/deactivate Cloudflare so that the website uses the origin’s SSL certificate

• Activate Cloudflare again and try to access your website again in 24 hours to see if the SSL certificate has been successfully deployed

2. Then, Re-start the process

• Go to the SSL/TLS app on your Cloudflare dashboard and scroll down to the bottom
• Click the Disable Universal SSL
• Wait for a few minutes then click the Enable Universal SSL

3. PATCH the validation method with the API using 

   https://api.cloudflare.com/#ssl-verification-edit-ssl-certificate-pack-validation-method

   .
4. Follow the Apex Validation steps.
5. Understand how the certificate works
   Certificates will only cover a single level of subdomains (.example.com, but not *…example.com):

• It will work –

  www.example.com

• Will NOT work – 

  www.test.example.com

• It will work –

  example.com

• Will NOT work – 

  staging.www.example.com

• Will work – 

  test.example.com

6. Wait 24 hours, in most cases, this is just a timing issue.

Check if you have an active SSL certificate under the SSL/TLS app, if it it says “Initializing Certificate”, wait until you see Active Certificate. Pause Cloudflare in the meantime.

[Looking for a solution to another query? We are just a click away.]

Conclusion

To sum up, our skilled Support Engineers at Bobcares demonstrated how to resolve cloudflare error code ssl_error_no_cypher_overlap.