How to fix Error: tlsv1 alert handshake failure (TLS negotiation failed) in Node.js

# Test the connection with openssl
openssl s_client -connect example.com:443 -showcerts

# Look at the output:
# - "Verify return code: 0 (ok)" = TLS successful, issue is elsewhere
# - "alert handshake failure" = TLS negotiation failed (this error)
# - "Verify return code: 20" = Certificate validation failed (different error)

# Test TLSv1.3
openssl s_client -connect example.com:443 -tls1_3 -showcerts 2>&1 | grep -E 'Protocol|Ciphers'

# Test TLSv1.2
openssl s_client -connect example.com:443 -tls1_2 -showcerts 2>&1 | grep -E 'Protocol|Ciphers'

# Test TLSv1.0 (if needed)
openssl s_client -connect example.com:443 -tls1 -showcerts 2>&1 | grep -E 'Protocol|Ciphers'

# Check your current version
node --version

# Update using nvm (recommended)
nvm install --lts
nvm use --lts

# Or install from nodejs.org

const https = require('https');

const options = {
  hostname: 'example.com',
  port: 443,
  path: '/api',
  method: 'GET',
  minVersion: 'TLSv1.2',  // Require at least TLS 1.2
  maxVersion: 'TLSv1.3',  // Allow up to TLS 1.3
  ciphers: 'HIGH:!aNULL:!MD5'  // OpenSSL cipher string
};

https.request(options, (res) => {
  console.log('Connected successfully');
}).on('error', (err) => {
  console.error('TLS error:', err.message);
}).end();

const axios = require('axios');
const https = require('https');

const agent = new https.Agent({
  minVersion: 'TLSv1.2',
  ciphers: 'HIGH:!aNULL:!MD5'
});

axios.get('https://example.com/api', { httpsAgent: agent });

# For testing purposes only - NOT for production
node --tls-min-v1.0 your-app.js

# List curves supported by Node.js
node -e "console.log(require('crypto').getCurves())"

# Test OpenSSL available curves
openssl ecparam -list_curves

const tls = require('tls');
const https = require('https');

const options = {
  hostname: 'example.com',
  port: 443,
  ecdhCurve: 'auto'  // Let Node.js select
};

https.request(options, (res) => {
  // Handle response
}).end();

# Run with TLS debugging enabled
NODE_DEBUG=tls node your-app.js 2>&1 | head -50

# Or with more verbose output
NODE_DEBUG=tls,crypto node your-app.js 2>&1 | head -100