Articles in this section

See more

Error displayed in Plesk Home page: nginx: [emerg] cannot load certificate key "/usr/local/psa/var/certificates/scfNvuszu"

Avatar
Stefan Yakubov
Updated
Follow
Plesk for Linux kb: bug ABT: Group A

Applicable to:

  • Plesk for Linux

Symptoms

  • The following error appears in Plesk Home page:

    New configuration files for the Apache web server were not created due to the errors in configuration templates: nginx: [emerg] cannot load certificate key "/usr/local/psa/var/certificates/scfNvuszu": PEM_read_bio_PrivateKey() failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: ANY PRIVATE KEY) nginx: configuration file /etc/nginx/nginx.conf test failed . Detailed error descriptions were sent to you by email. Please resolve the issues and click here to generate broken configuration files once again or here to generate all configuration files. See the details in Configuration Troubleshooter

  • Nginx is disabled in the server at Plesk level:

    # plesk sbin nginxmng --status
    Disabled

  • Nginx service remains enabled at system level:

    # systemctl status nginx
    ● nginx.service - Startup script for nginx service
    Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
    Drop-In: /usr/lib/systemd/system/nginx.service.d
    └─limit_nofile.conf, worker_files_limit.conf
    Active: failed (Result: exit-code) since Mon 2019-09-09 17:37:43 WEST; 3 days ago

Cause

Misconfiguration on the Webserver Configuration files

  • The certificate from the error is being loaded by an orphan Nginx configuration file:

    # egrep -Rl scfNvuszu /etc/nginx/ 2> /dev/null
    /etc/nginx/plesk.conf.d/webmails/example.com_webmail.conf

  • The orphan Nginx configuration file is from a domain which doesn't exist in Plesk:

    # plesk db "select * from domains where name ='example.com'"
    (Empty Output)

Clarify with customers and if server is managed by WHMCS or similar solution and there'e mass operations on domains done at the same time, link PPPM-12472. On the next reoccurrence collect the info requested at PPP-50872 before fixing.

Resolution

  1. Connect to the server via SSH

  2. Get the path where the orphaned record exists with the following command:

    # egrep -Rl scfNvuszu /etc/nginx/ 2> /dev/null
    /etc/nginx/plesk.conf.d/webmails/example.com_webmail.conf

  3. Remove the orphan Nginx configuration file:

    # mv /etc/nginx/plesk.conf.d/webmails/example.com_webmail.conf /root/

  4. Log into Plesk

  5. Go to Extensions > My Extensions > Webserver Configurations Troubleshooter > Select All the Broken configuration files > Click on Remove > Click on Rebuild - All

  6. Connect to the server via SSH again and disable Nginx service:

    # plesk sbin nginxmng --disable

    Verify Nginx service was disabled successfully:

    # systemctl status nginx
    nginx.service - Startup script for nginx service
    Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)

Comments

2 comments

Sort by Date Votes
  • Avatar
    Markus

    Is it true? Is here missing the happy end? I have this problem after migration on new server. BUT I USE NGINX ONLY. No proxy, pure Nginx. Without nginx I can withdraw my server contract. Please, do you have another solution, or is here the end of the world/Plesk. I love Plesk and can't believe it.

    0
    Comment actions Permalink
  • Avatar
    Anton Maslov

    Markus if Nginx is in use, then this article should help: #360009682374

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles