Forum

Error 525 SSL handshake failed (Cloudflare)

apollo

2 November 2015, 15:21

I'm asking here because I think this might have something to do with my settings in Hiawatha after finding this on Google:
https://www.litespeedtech.com/support/forum/threads/solved-error-525-ssl-handshake-failed.12779/

liteSpeed has SSL negotiation/renegoication protection, since all SSL traffic going though CloudFlare IPs, you may need to add cloudflare IP as trusted IP, or turn off SSL renegotiation protection

I get the error on and off, so it's not a constant thing (in fact, it's gone again). Anyway, here are some settings I use (don't know for certain whether they might be relevant or not):

MaxKeepAlive = 30
TimeForRequest = 5,20
SSLcertFile = /etc/hiawatha/serverkey.pem
MaxRequestSize = 4096

...

BanOnFlooding = 10/1:15
BanOnGarbage = 300
BanOnMaxReqSize = 300
BanOnSQLi = 60
BanOnTimeout = 30
BanOnWrongPassword = 3:960
KickOnBan = yes
RebanDuringBan = yes

...

PreventXSS = yes
PreventSQLi = yes

I can't see anything in the logs.

Any ideas?

Hugo Leisink

2 November 2015, 21:23

I don't know Cloudflare that well, so I'm not sure what causes the error. You could contact Cloudflare, since one of their machines shows the error message. One of their logfiles might hold the right information about what goes wrong. I could as well be a bug in their software.

This topic has been closed.

Back