| Previous | Next |
| HTTP_STATUS_TIMEOUT_OCCURED | HTTP_STATUS_INVALID_CERTIFICATE |
HTTP_STATUS_HANDSHAKE_FAILED
The failure occurs before HTTP request processing. Common causes include unsupported TLS versions or ciphers, a server that terminates the handshake, or TLS configuration that differs across origin nodes.
Test the origin TLS endpoint directly with the intended SNI name, inspect handshake logs, and compare all backend nodes. A packet capture may be necessary because the failure can happen below HTTP logging.
With a 525, the browser-to-Cloudflare TLS connection is not the failed leg; the problem is between Cloudflare and the configured origin. Check the origin TLS listener, supported protocol versions and ciphers, SNI/virtual-host configuration, and certificate setup expected by the selected Cloudflare SSL mode.
Looking for a different code? Search another status or error code.