Symptoms
-
Apache fails to start on a Plesk server with the following error message in
/var/log/httpd/error_log(CentOS/RHEL) or/var/log/apache2/error.log(Debian/Ubuntu):AH02311: Fatal error initialising mod_ssl, exiting. See /var/www/vhosts/system
/example.com/logs/error_log for more information -
In
/var/www/vhosts/system/example.com/logs/error_logappears the following error message:AH01898: Unable to configure permitted SSL ciphers
SSL Library Error: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match
Cause
Product issue:
-
#PPPM-12964 "Apache now runs if it is configured with TLS 1.3 ciphers only."
Fixed in:- Plesk Obsidian 08 June 2021 (Linux)
Resolution
Please consider updating your server:
Workaround
If update is not possible for some reason you may try the following
workaround
-
Go to to Tools & Settings > TLS versions and ciphers management.
Note: If the option TLS versions and ciphers management is missing in Tools & Settings, install the SSL! It extension.
-
Under the TLS versions and ciphers by Mozilla section, click [change] (or Enable).
-
Select the Intermediate (recommended)Â cipher suite and click Change and Sync.
