Applicable to:
- Plesk Obsidian for Linux
Symptoms
-
Apache fails to start on a Plesk server with the following error message in
/var/log/httpd/error_log(CentOS/RHEL) or/var/log/apache2/error.log(Debian/Ubuntu):CONFIG_TEXT: AH02311: Fatal error initialising mod_ssl, exiting. See /var/www/vhosts/system
/example.com/logs/error_log for more information -
In
/var/www/vhosts/system/example.com/logs/error_logappears the following error message:CONFIG_TEXT: AH01898: Unable to configure permitted SSL ciphers
SSL Library Error: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match
Cause
Product issue:
-
#PPPM-12964 "Apache now runs if it is configured with TLS 1.3 ciphers only."
Fixed in:- Plesk Obsidian 08 June 2021 (Linux)
Resolution
Workaround
If update is not possible for some reason you may try the following
-
Go to to Tools & Settings > TLS versions and ciphers management.
Note: If the option TLS versions and ciphers management is missing in Tools & Settings, install the SSL! It extension.
-
Under the TLS versions and ciphers by Mozilla section, click [change] (or Enable).
-
Select the Intermediate (recommended) cipher suite and click Change and Sync.
Comments
1 comment
had a similar error on activating nginx on ubuntu 20
# /usr/local/psa/admin/sbin/nginxmng --enable
[] 3248426:60f017cfe00dc ERR [util_exec] proc_close() failed ['/opt/psa/admin/bin/nginx-config' '-t'] with exit code [1]
[] 3248426:60f017cfe00dc ERR [util_exec] proc_close() failed ['/opt/psa/admin/bin/nginx-config' '-t'] with exit code [1]
[] 3248426:60f017cfe00dc ERR [panel] Apache config (16263474820.78848300) generation failed: Template_Exception: nginx: [emerg] SSL_CTX_set_cipher_list("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256") failed (SSL: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match)
nginx: configuration file /etc/nginx/nginx.conf test failed
file: /opt/psa/admin/plib/Template/Writer/Webserver/Abstract.php
line: 75
code: 0
nginx: [emerg] SSL_CTX_set_cipher_list("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256") failed (SSL: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match)
nginx: configuration file /etc/nginx/nginx.conf test failed
Please sign in to leave a comment.