• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue NGINX Issue

bravuralion

New Pleskian
Server operating system version
Ubuntu 22.04.4 LTS
Plesk version and microupdate number
Version 18.0.60 Update #1
In Plesk i get the following Error Message:

Aufgrund folgender Fehler in den Konfigurationsvorlagen konnten keine neuen Konfigurationsdateien für den Apache-Webserver erstellt werden: nginx: [emerg] SSL_CTX_use_certificate("/opt/psa/var/certificates/scfWkDlPC") failed (SSL: error:0A00018F:SSL routines::ee key too small) nginx: configuration file /etc/nginx/nginx.conf test failed.

NGINX.CONF:
#user nginx;
worker_processes 1;

#error_log /var/log/nginx/error.log;
#error_log /var/log/nginx/error.log notice;
#error_log /var/log/nginx/error.log info;

#pid /var/run/nginx.pid;

include /etc/nginx/modules.conf.d/*.conf;

events {
worker_connections 1024;
}


http {
include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log /var/log/nginx/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;
#tcp_nodelay on;

#gzip_disable "MSIE [1-6]\.(?!.*SV1)";
proxy_buffers 8 16k;
proxy_buffer_size 32k;
fastcgi_buffers 32 32k;
fastcgi_buffer_size 64k;
fastcgi_read_timeout 600;
fastcgi_send_timeout 600;
#gzip on;
#gzip_disable "MSIE [1-6]\.(?!.*SV1)";

server_tokens off;

include /etc/nginx/conf.d/*.conf;
}

# override global parameters e.g. worker_rlimit_nofile
include /etc/nginx/*global_params;

The only thing i did in /etc/ssl/openssl.cnf was changing this:


[system_default_sect]
CipherString = DEFAULT:mad:SECLEVEL=0

because with the default value nginx and plesk refused to start completly. can someone help with this issue?
 
You can check with openssl what domain is causing it:
Code:
openssl x509 -in /opt/psa/var/certificates/scfWkDlPC -text -noout

And then try to temp remove the SSL for that domain, if nginx starts then you can renew the SSL to a new one
 
Back
Top