SSL_ERROR_NO_CYPHER_OVERLAP after installing certificate

My domain is: nextcloud.jeansibelius.net
My web server is (include version): Apache/2.4.59 (Debian)
The operating system my web server runs on is (include version): Debian 12
The version of my client is: certbot 2.10.0

Hello!
I recently installed nextcloud on my server. Today I installed ssl certificate using certbot running: sudo certbot --apache. Without any error it managed to install it. However when I try to go to nextcloud.jeansibelius.net I get an error: SSL_ERROR_NO_CYPHER_OVERLAP.
Can any of you guys help me please?

Hi @kazimierzkrauze,

It looks like this DNS record is pointed at the Cloudflare CDN. If that's intentional, I would check your Cloudflare settings (both the IP addresses that it's supposed to point at, and the Cloudflare account configuration including the address of the back-end server, and any other Cloudflare settings that relate to Cloudflare's ability to reach your site).

I think it may be more likely that the current problem has to do with your Cloudflare or DNS settings more than with your Let's Encrypt certificate setup.

2 Likes

Hello @schoen! Thank you for your reply. I checked cloudflare and don't even see any cdn configurations. DNS record looks like this:

1 Like

Can you set that hostname DNS Only to test the connection without the Cloudflare proxy in between your browser and server?

If that is not working, it is much easier to troubleshoot without the Cloudflare proxy enabled.

Once the site loads correctly over HTTPS with a direct connection, you can then re-enable the Cloudflare proxy. Be sure that your Cloudflare Encryption mode is set to Full (strict).

4 Likes

Sure, I disabled it.

1 Like

And what happens when you try to connect directly?

3 Likes

It works! :see_no_evil: sorry for trouble.

But wait, what can I do to keep enabled proxy?

When re-enable proxy I get the same error: SSL_ERROR_NO_CYPHER_OVERLAP.

I believe this happens when Cloudflare has a problem on their side. This is managed by Cloudflare, so there's not much to do except ask them for help or wait a little while and see if it resolves itself.

2 Likes

Did you make sure

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.