Skip to content
5xx · Server Error

525 SSL Handshake Failed

A Cloudflare error meaning the TLS handshake with the origin server failed.

What it means

HTTP 525 is a non-standard Cloudflare status returned when the SSL/TLS handshake between Cloudflare and the origin server fails. Cloudflare reached the origin but could not negotiate a secure connection, often because of a certificate or cipher mismatch on the origin.

When it happens

It happens when the origin's certificate is missing, expired, or misconfigured, when Cloudflare's SSL mode (such as Full or Full Strict) does not match what the origin can offer, or when the two sides share no compatible cipher suite.

How to fix it

  • Confirm the origin has a valid, unexpired certificate installed correctly.
  • Match Cloudflare's SSL/TLS mode to the origin's capabilities (Full Strict requires a valid origin certificate).
  • Check that Cloudflare and the origin support a common cipher suite and TLS version.
  • Install a Cloudflare Origin CA certificate on the origin if appropriate.

SEO impact

Damaging if sustained. A failed handshake means crawlers get a server error rather than the page, so it cannot be indexed until the TLS issue is resolved.

Check it with Sitewell

Find out which of your URLs return 525

Paste a list of URLs and Sitewell checks the status code of every one at once — free and without signup.

Related codes

Related guides