Article ID: 8522, created on May 15, 2010, last review on May 11, 2014

  • Applies to:
  • Plesk 9.5 for Linux/Unix

Symptoms

After the upgrade to version 9.5.x, or after an OS packages upgrade, I am unable to start Parallels Plesk Panel web service. The following information is displayed in the log:

-bash-4.0# tail -f /var/log/sw-cp-server/error_log
2010-05-15 16:49:02: (log.c.75) server started
2010-05-15 16:49:08: (log.c.135) server stopped
2010-05-15 16:49:08: (log.c.75) server started
2010-05-15 16:52:02: (log.c.135) server stopped
2010-05-15 16:54:31: (log.c.75) server started
2010-05-15 16:59:39: (log.c.135) server stopped
2010-05-15 16:59:39: (log.c.75) server started
2010-05-15 16:59:39: (network.c.345) SSL: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command
2010-05-15 16:59:39: (log.c.75) server started
2010-05-15 16:59:39: (network.c.345) SSL: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command



Cause

The ciphers file most likely has invalid syntax or is corrupted:

-bash-4.0# cat /usr/local/psa/admin/conf/cipher.lst
ADH-AES256-SHA DHE-RSA-AES256-SHA DHE-DSS-AES256-SHA AES256-SHA
KRB5-DES-CBC3-MD5 KRB5-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA
EDH-DSS-DES-CBC3-SHA DES-CBC3-SHA ADH-DES-CBC3-SHA DES-CBC3-MD5


In this example, there are newline symbols at the end of each line, whereas all ciphers should be space-separated and placed into a single line.

Resolution

1) Make sure you have an up-to-date version of Parallels Plesk Panel.
2) Make sure that the file /usr/local/psa/admin/conf/cipher.lst has correct syntax:
2.1) Only valid ciphers are listed.
2.2) Ciphers are space-separated.
2.3) There are no new lines (CR, LF) in the file.
2.4) No binary symbols are present.

Example of a working file:

-bash-4.0# cat /usr/local/psa/admin/conf/cipher.lst
ADH-AES256-SHA DHE-RSA-AES256-SHA DHE-DSS-AES256-SHA AES256-SHA KRB5-DES-CBC3-MD5 KRB5-DES-CBC3-SHA EDH-RSA-DES-CBC3-SHA EDH-DSS-DES-CBC3-SHA DES-CBC3-SHA ADH-DES-CBC3-SHA DES-CBC3-MD5

60d3e722783ac7177a2b4b4c13af4062 a914db3fdc7a53ddcfd1b2db8f5a1b9c 29d1e90fd304f01e6420fbe60f66f838 6ef0db7f1685482449634a455d77d3f4 56797cefb1efc9130f7c48a7d1db0f0c

Email subscription for changes to this article
Save as PDF