Issue 421 Misdirected Request

[nMLxTMJTZ]

for fix CVE-2025-23048 the SSLStrictSNIVHostCheck directive is now enabled by default and proxy must send host to apache

 

[gary_za]

Thanks for the Command line fix, however users that are using Webmail and roundcube still get the same error and cannot access their mail

 

[nisamudeen97]

Misdirected Request​

The client needs a new connection for thisrequest as the requested host name does not matchthe Server Name Indication (SNI) in use for thisconnection.


We are facing this issue with all our plesk servers

the fix suggested in the post worked for me in my four servers.

echo -e "proxy_ssl_server_name on;\nproxy_ssl_name \$host;" > /etc/nginx/conf.d/fixssl.conf && service nginx restart

 

[delefant]

Command applied and some websites work but others throw error 400

Bad Request​

Your browser sent a request that this server could not understand.


If i disable Proxy mode inside apache settings, the webstie is working...

Any global solution?

 

[nisamudeen97]

Solution is already there in this thread and it is working. Please read the updates above.