Many administrators and website owners using Plesk for Linux have faced the following error after a recent Apache update:
421 Misdirected Request
The client needs a new connection for this request because the requested hostname does not match the Server Name Indication (SNI) used.
This message often appears in the domain log as well:
AH02032: Hostname default-xxx (default host as no SNI was provided) and hostname www.example.com provided via HTTP have no compatible SSL setup
#Cause
A new Apache version included security fixes (CVEs) that affect the interaction between Apache and nginx. These changes can lead to incompatibilities with SNI delivery, especially when nginx is used as a reverse proxy ahead of Apache. Often, automatic system updates are enabled, meaning that updates are installed without manual intervention.
#Solution
The recommended quick fix is to configure nginx to correctly forward SNI information. Follow these steps:
Log into the server via SSH
Preferably with a user who has root privileges.Execute the following command:
bash
echo -e "proxy_ssl_server_name on; proxy_ssl_name \$host;" > /etc/nginx/conf.d/fixssl.conf && service nginx restartThis command creates a new configuration file for nginx and restarts the service.
Note:
If the folder/etc/nginx/conf.d/does not exist, check the nginx configuration or create the folder. You may need to execute the command withsudo.After this, the 421 Misdirected Request error should no longer occur and the websites should be accessible again.
#Important Notes
Root Privileges Required: The command must be executed with sufficient permissions (possibly use
sudo).Automatic Updates: Check under Plesk > Tools & Settings > Update Settings to see if automatic system updates are enabled. This helps track when updates are installed.
Rollback: If you encounter a 403 error after making the adjustment, remove the file
/etc/nginx/conf.d/fixssl.confand restart nginx.
#Conclusion
The "421 Misdirected Request" issue following Apache updates is currently widespread. The workaround described above provides a quick solution until developers provide a permanent fix.
#Self-Promotion
Constant updates, security vulnerabilities, or high licensing costs making life difficult?
With our Managed Hosting and Reseller offerings, you can relax. We'll handle operations, maintenance, and security – reliably and cost-effectively.
