John wrote in post #18406455
Hah, never seen the embed image tool on the bottom left of the post area until now. It will help with the troubleshooting on my end.
Still, not entirely sure why it is saying no response, zero bytes received. If I do a curl call on the HTTPS url, it returns 200 HTTP code with the correct mime-type:
I did some debugging from POTN server and I found that when httpix.com fails to connect with SSL...
> curl -svo /dev/null https://httpix.com/ 2>&1 | egrep -v "^{.*$|^}.*$|^\* http.*$"
* About to connect() to httpix.com port 443 (#0)
* Trying 104.27.129.111...
* Connected to httpix.com (104.27.129.111) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP)
* Cannot communicate securely with peer: no common encryption algorithm(s).
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: httpix.com
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection 0
* Issue another request to this URL: 'https://httpix.com/'
* About to connect() to httpix.com port 443 (#1)
* Trying 104.27.129.111...
* Connected to httpix.com (104.27.129.111) port 443 (#1)
* TLS disabled due to previous handshake failure
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -12286 (SSL_ERROR_NO_CYPHER_OVERLAP)
* Cannot communicate securely with peer: no common encryption algorithm(s).
* Closing connection 1
... Cloudfare's own test site connects fine from POTN (http error 520 is foobar, as this a command line contact:
https://support.cloudflare.com …turning-an-unknown-error)
:
> curl -svo /dev/null https://whiskytango.us/ 2>&1 | egrep -v "^{.*$|^}.*$|^\* http.*$"
* About to connect() to whiskytango.us port 443 (#0)
* Trying 104.16.187.208...
* Connected to whiskytango.us (104.16.187.208) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_RSA_WITH_AES_128_CBC_SHA
* Server certificate:
* subject: CN=ssl462575.cloudflaressl.com,OU=PositiveSSL Multi-Domain,OU=Domain Control Validated
* start date: Dec 15 00:00:00 2016 GMT
* expire date: Oct 12 23:59:59 2017 GMT
* common name: ssl462575.cloudflaressl.com
* issuer: CN=COMODO RSA Domain Validation Secure Server CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: whiskytango.us
> Accept: */*
>
< HTTP/1.1 520 Origin Error
< Date: Thu, 20 Jul 2017 09:37:38 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: __cfduid=d83438f3cd986c2c5d46e8a237342cb461500543458; expires=Fri, 20-Jul-18 09:37:38 GMT; path=/; domain=.whiskytango.us; HttpOnly
< Expires: Thu, 01 Jan 1970 00:00:01 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< X-Frame-Options: SAMEORIGIN
< Server: cloudflare-nginx
< CF-RAY: 3814f168699f535c-MIA
<
* Connection #0 to host whiskytango.us left intact
And from my dev installation SSL also works ok:
> curl -svo /dev/null https://whiskytango.us/ 2>&1 | egrep -v "^{.*$|^}.*$|^\* http.*$"
* About to connect() to whiskytango.us port 443 (#0)
* Trying 104.16.187.208...
* Connected to whiskytango.us (104.16.187.208) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_RSA_WITH_AES_128_CBC_SHA
* Server certificate:
* subject: CN=ssl462575.cloudflaressl.com,OU=PositiveSSL Multi-Domain,OU=Domain Control Validated
* start date: Dec 15 00:00:00 2016 GMT
* expire date: Oct 12 23:59:59 2017 GMT
* common name: ssl462575.cloudflaressl.com
* issuer: CN=COMODO RSA Domain Validation Secure Server CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: whiskytango.us
> Accept: */*
>
< HTTP/1.1 520 Origin Error
< Date: Thu, 20 Jul 2017 09:37:38 GMT
< Content-Type: text/html; charset=UTF-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: __cfduid=d83438f3cd986c2c5d46e8a237342cb461500543458; expires=Fri, 20-Jul-18 09:37:38 GMT; path=/; domain=.whiskytango.us; HttpOnly
< Expires: Thu, 01 Jan 1970 00:00:01 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< X-Frame-Options: SAMEORIGIN
< Server: cloudflare-nginx
< CF-RAY: 3814f168699f535c-MIA
<
* Connection #0 to host whiskytango.us left intact
So, maybe we could take this to PM because I do not think people are interested in these sort of technical details?

I have set up a testing page for you, I'll pm the url now.