CD
Cloudflare Developers•12mo ago
cryptomania | skiff

Getting strange SSL errors when connecting to Cloudflare Pages site

We see a small percentage of our users running into SSL issues when connecting to app.skiff.com which runs on Cloudflare Pages. The underlying TLS error is * error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number The really strange part is that the SSL connection goes away when they move off of wifi and onto their 4g/5g connection. This was true for an Android device connecting to the Haifa data center. This was true for an iphone and osx device connecting to San Jose data center. When the iphone switched to their cellular connection, the osx machine switched to hotspot onto their iphone, and the SSL connections disappeared dissappeared for the osx device. To confirm, there is a subset of clients who see this message for ALL connection attempts, and other clients have no issue. 
$ curl https://app.skiff.com/ -v
* Trying 2606:4700:3108::ac42:2918:443...
* Connected to app.skiff.com (2606:4700:3108::ac42:2918) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
* CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
* Closing connection 0
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
$ curl https://app.skiff.com/ -v
* Trying 2606:4700:3108::ac42:2918:443...
* Connected to app.skiff.com (2606:4700:3108::ac42:2918) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
* CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
* Closing connection 0
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
We have an internal ticket # 2855049 but just wanted to raise awareness here in case anyone has seen this before. Note that we do not see any SSL issues for cloudflare proxied records like our api server (api.skiff.com).
3 Replies
cryptomania | skiff
cryptomania | skiff•12mo ago
@Walshy | Pages if you have a second to take a look. We're getting increasing user reports from our discord where users are unable to load our app that is served through Pages
Walshy
Walshy•12mo ago
👀 This one is quite outside my wheelhouse haha but I have added myself to the ticket
cryptomania | skiff
cryptomania | skiff•12mo ago
No worries! Thank you for looking into it!
Want results from more Discord servers?
Add your server
More Posts
Struggling to get Durable Objects to work with pagesI am building a pages app using the Vue template. So far I have gotten Functions, KV, and R2 to worDeploying to ENV associated with multiple zone IDsQuestion: Does the Wrangler CLI support publishing workers with multiple routes that have multiple zCreating worker with apiHello, I want to create a worker with api and I want a specific code to be entered into the created Node not downloading in pages buildsFor the past couple of days many deployments get stuck in the "Downloading node" stage. ``` 16:02:1All subdomains on a domain redirect to one server?Hi, I'm looking to add sort of a "catch all" for domains to go to one server unless otherwise specifI can t seem to access the analyticsI can't seem to access the analytics engine inside hono. Does anyone know how to do that? I tried cCustom domain - (partial CNAME setup)Hi, I want to use a custom domain with my pages app, the issue is I cannot have the nameservers onImporting private key using jose/web crypto api in cloudflare workers returns an undefined CryptoKeyHi, im trying to import a PKCS8 private key in my worker. I have attempted to do this using both thewrangler.toml where?Hello, I just created worker via Wrangler CLI and I would like to edit my worker.js and wrangler.tom308 redirects for paths without trailing slashHave followed discussion on the thread - https://community.cloudflare.com/t/cloudflare-pages-get-rid