Unable to connect to my own web server via HttpService

[Encythe]

I’ve noticed that Roblox has slowly been rolling out new servers that fail to verify my SSL connection between the Cloudflare intermediate and Roblox, which has broken communications between our game and my web server.

Image of the HttpService request failing due to a TlsVerificationFail error.

A noticeable dip in traffic in the Cloudflare dashboard.

I’ve tried:

• Renewing my SSL certificate in Cloudflare [which didn’t work]
• Using a Let’s Encrypt SSL certificate directly [which also didn’t work]
• Enabling HSTS [which did not help and just made the problem worse]
• Setting SSL Mode to “Full (Strict)” [but Roblox still refuses to connect to the Cloudflare intermediate]
• Setting SSL Mode to “Flexible” [but i ran into an infinite redirect problem, and did not fix the original Roblox to Cloudflare intermediate connectivity issue]
• Setting the minimum TLS version to v1.2 [but Roblox already makes requests using TLS v1.3 by default]
• Using HTTP instead of HTTPS [but Roblox doesn’t like that]
• Accessing the site in my browser [which works fine]
• Using curl to access the site [which works fine]
• Using openssl to verify that the SSL is valid [it is]
• Using SSL Labs to verify the certificate chain is ok [it is]
• Enabling HTTPS Rewrites [it’s already HTTPS]
• Connecting to one of my other domains, which does not use Cloudflare’s SSL encryption [works like a charm]

From what I’ve observed, here are the steps to reproduce:

1. Have your origin server be proxied by Cloudflare.
2. Use Cloudflare for HTTPS and SSL certificates, Origin Certificate for the origin web server, and Edge Certificate for the Cloudflare intermediaries.
3. Send an HTTP request to said origin server using HttpService.
4. Experience a TlsVerificationError.

Expected behavior

The connection between Roblox and the Cloudflare intermediate should succeed. The web server should be able to communicate with the Roblox server, which is making the request, and traffic levels should return to normal [approx. 18,000 requests per hour]

A private message is associated with this bug report

[Hooksmith]

Thanks for the report, we’re looking into this one.

[Hooksmith]

Our teams have found the root cause of this issue and we are now working on mitigations. It will be some time before the issue is resolved because we need to roll out a new version of the engine. Thanks for your patience on this.

[asdfiji123]

Hi @Encythe - we recently rolled back RCC to the previous version, which we believe should also fix your use case. Could you please let us know if you are now able to connect via HttpService, or if the issue persists?

[Encythe]

Hi!

Yes, I can connect to my server via HttpService again, and requests through Cloudflare have returned to normal.

[asdfiji123]

Awesome! Thank you for reporting this issue!