Plesk Website Error: 421 Misdirected Request

Plesk for Linux

Symptoms
All websites show error:

421 Misdirected Request

The following error message is logged in domain’s log (Plesk > Domains > example.com > Logs):

AH02032: Hostname default-203_0_113_2 (default host as no SNI was provided) and hostname www.example.com provided via HTTP have no compatible SSL setup

Cause
In recent Apache version, Apache team has released fixes for CVEs that affected Apache + nginx functionality: new changes do not allow Apache process requests from nginx without the server name (by default, nginx does not pass the server name through SNI when establishing a connection with a proxied HTTPS server).

Plesk team is preparing a custom fix for Plesk Obsidian 18.0.70 and 18.0.71.

Resolution
Add proxy_ssl_server_name, proxy_ssl_name and proxy_ssl_session_reuse directives in nginx configuration to make nginx pass the server name to Apache through TLS Server Name Indication (SNI) extension:

  1. Connect to your Plesk server via SSH.
  2. Run the script (without any modifications): 
    echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;\nproxy_ssl_session_reuse off;" > /etc/nginx/conf.d/fixssl.conf && systemctl restart nginx

     

Was this article helpful?

Yes No

Related Articles