# Traefik v3 getting SSL handshake errors

**URL:** https://community.traefik.io/t/traefik-v3-getting-ssl-handshake-errors/24123
**Category:** Traefik v3 (latest)
**Tags:** kubernetes-ingress
**Created:** [August 22, 2024, 1:24pm UTC](https://community.traefik.io/t/traefik-v3-getting-ssl-handshake-errors/24123 "2024-08-22T13:24:29Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![kreatoo](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/kreatoo/32/9218_2.png) [@kreatoo](https://community.traefik.io/u/kreatoo)
#### Post date: [August 22, 2024, 1:24pm UTC](https://community.traefik.io/t/traefik-v3-getting-ssl-handshake-errors/24123/1 "2024-08-22T13:24:29Z")

</div>

When I try to access any of my ingress routes (or just localhost) I get an SSL error like this;

```bash
$ curl https://localhost
curl: (35) OpenSSL/3.0.13: error:0A000438:SSL routines::tlsv1 alert internal error

```

Using the http works fine. I use cert-manager to manage the certificate, and it worked fine before.

Traefik app;

```yaml
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: traefik
  namespace: argocd
spec:
  destination:
    namespace: traefik
    server: 'https://kubernetes.default.svc'
  source:
    repoURL: 'https://traefik.github.io/charts'
    targetRevision: 30.*
    chart: traefik
    helm:
      values: |
        additionalArguments:
          - --providers.kubernetescrd.allowCrossNamespace=true
          - --entrypoints.name.http3
          #- --entryPoints.web.forwardedHeaders.insecure
          #- --log.level=DEBUG
          #- --serverstransport.insecureskipverify=true
        ports:
          web:
            redirectTo:
                port: websecure
        tlsStore:
          default:
            defaultCertificate:
              secretName: wildcard-kreato.dev-tls
  sources: []
  project: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true

```

Traefik ingress;

```yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: mirror-ingress
  namespace: nginx
  annotations:
    #traefik.ingress.kubernetes.io/router.entrypoints: web
    #traefik.ingress.kubernetes.io/router.tls: "true"
    cert-manager.io/cluster-issuer: mainissuer

spec:
  rules:
  - host: bin.kreato.dev
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: webserver
            port:
              number: 80
  tls:
    - secretName: wildcard-kreato.dev-tls
      hosts:
        - bin.kreato.dev

```

I am on Traefik version 3.1.2, Helm chart 30.1.0