Cloudflare's minimum TLS version setting is per-zone. Raising it to 1.3 blocks any client that cannot negotiate 1.3, which reads as a version mismatch to the visitor.
Cloudflare's minimum TLS version setting is per-zone. Raising it to 1.3 blocks any client that cannot negotiate 1.3, which reads as a version mismatch to the visitor.
SSL/TLS → Edge Certificates → Minimum TLS Version: set 1.2 unless you have a compliance reason for 1.3. Leave Opportunistic Encryption on.
Cloudflare has its own failure mode, but ERR_SSL_VERSION_OR_CIPHER_MISMATCH has a wider set of causes. The most common one overall is: The server only supports TLS 1.0 or 1.1.
Enable TLS 1.2 and 1.3. On nginx: `ssl_protocols TLSv1.2 TLSv1.3;` then reload.
The SSL check enumerates exactly which protocol versions and suites the server accepts, turning guesswork into a list.
Cloudflare's minimum TLS version setting is per-zone. Raising it to 1.3 blocks any client that cannot negotiate 1.3, which reads as a version mismatch to the visitor.
SSL/TLS → Edge Certificates → Minimum TLS Version: set 1.2 unless you have a compliance reason for 1.3. Leave Opportunistic Encryption on.
The browser and server have no protocol version or cipher suite in common, so the handshake ends before it starts. Almost always an origin still pinned to TLS 1.0/1.1 or an ancient cipher list.