CIpher mismatch error when accessing from work computer

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: https://changeride.com

My web server is (include version): TLS 1.3

My hosting provider, if applicable, is: Vercel

I can login to a root shell on my machine (yes or no, or I don't know): I dont know

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

Below is the description of the issue.

I have a Electric Vehicles website. The project is in Preact, Astro, and Typescript. It is hosted on vercel and uses SSL from Vercel and Lets Encrypt. I get ERR_SSL_VERSION_OR_CIPHER_MISMATCH, HTTP Error 403. This error only occurs in the client's work computer, he tried accessing it from his colleagues computers, and it displayed the error as well. The site works normally on my end and on the client's personal computers as well. Its just for the organization's computers that its not working. This is an issue since many people use their work computer for daily use.

https://www.ssllabs.com/ssltest/analyze.html?d=changeride.com
This is the report of the SSL certifcate test.

Also the client's work computer has its VPN turned on which he cannot turn off. Also even when he enter https://changeride.com it automatically redirects to http://changeride.com.

Tried clearing the cache, Tried enabling the TLS 1.3 in the chrome, these didnt work

I don't see anything particularly weird. There aren't a lot of cipher suites enabled, but ECDHE with AES & GCM is basically the standard that most systems should be using now and should work on anything even halfway-recent (and matches Mozilla's recommendations). I don't suppose you can get from that organization which cipher suites they have enabled, and why? Maybe get them to visit the SSL Labs Client Test and send you the results?

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.