Nginx restart failed

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:http://skyaxis.skysecretary.com/

I ran this command:sudo certbot --nginx -d skyaxis.skysecretary.com

It produced this output:
NEXT STEPS:

  • The certificate was saved, but could not be installed (installer: nginx). After fixing the error shown below, try installing it again by running:
    certbot install --cert-name skyaxis.skysecretary.com

nginx restart failed:
nginx: [emerg] SSL_CTX_set_cipher_list("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:
TLS_CHACHA20_POLY1305_SHA256:
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:
ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:
ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:
DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:
DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:
DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:
AES128-GCM-SHA256:AES256-GCM-SHA384:
AES128-SHA256:AES256-SHA256:
AES128-SHA:AES256-SHA:
!aNULL:!eNULL:!EXPORT:!DES:!MD5:!RC4") failed (SSL: error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command error:0A000118:SSL routines::invalid command err:a000118:14:0:118 err:)

My web server is (include version): nginx

The operating system my web server runs on is (include version):ubuntu 22.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 1.21.0

2

Welcome @Abdulbarict

That is a very unusual error. For some reason your nginx is failing when Certbot adds a server block for HTTPS using the standard cipher list.

Did you build nginx yourself or use the standard apt package?

Please show output of these 3 commands

sudo nginx -v
openssl version
openssl ciphers
1 Like
3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.