Error 525: SSL Handshake Failed (Cloudflare)
Updated Free mock REST & WebSocket APIs
Error 525 SSL Handshake Failed — Cloudflare couldn't complete the TLS handshake with the origin server.
- Class
- 5xx Server Error
- Defined in
- Unofficial (Cloudflare)
- Official
- No — Cloudflare-specific
- Cacheable by default
- No (unless Cache-Control/Expires say so)
- Safe to retry
- Sometimes — idempotent requests only
Try it: get a real 525 response
Our test endpoint answers every request with 525 SSL Handshake Failed.
curl -i https://mockfox.dev/api/status/525Use it in tests, health-check monitors or to see how your client handles a 525. Add ?delay=2000 to slow it down.
What does Error 525 mean?
Shown in Full or Full (strict) SSL mode when the origin doesn't speak TLS on port 443, has no certificate for the hostname, doesn't support SNI, or offers no cipher suites Cloudflare accepts. Check that the origin listens for HTTPS on 443 and serves a certificate for the domain (a free Cloudflare Origin CA certificate works), or temporarily switch the SSL mode to Flexible while fixing it.
How to fix 525
- Visitors: This is a server-side problem — wait a moment and retry, or check the site's status page.
- Developers: Check application and proxy logs at the time of the error, verify upstream services are healthy, and alert on 5xx rates.
Example 525 response
HTTP/2 525 server: cloudflare cf-ray: 8d2f1a3b4c5d6e7f-AMS content-type: text/html; charset=UTF-8
5xx Server Error: The server failed to fulfill a valid request — usually temporary, or a server-side bug. See the full list of HTTP status codes.
Related status codes
- 526 Invalid SSL CertificateIn Full (strict) mode, Cloudflare couldn't validate the origin's TLS certificate.
- 520 Web Server Returned an Unknown ErrorCloudflare got an empty, unknown or unexpected response from the origin server.
- 495 SSL Certificate Errornginx: the client presented an invalid TLS client certificate.
Related tools
Frequently asked questions
What does Error 525 SSL Handshake Failed mean?
Cloudflare couldn't complete the TLS handshake with the origin server.
Is 525 a client or a server error?
525 is a 5xx code: the server failed to handle a request that may be perfectly valid. It's often temporary.
Is 525 an official HTTP status code?
No. It isn't in the IANA HTTP Status Code Registry; it's specific to Cloudflare. Generic HTTP clients treat it as an unknown 5xx status.
How can I test how my app handles a 525?
Call https://mockfox.dev/api/status/525 — it responds with 525 to any method, with CORS enabled. Add ?delay=2000 to simulate a slow response.