Skip to main content
We are aware of an issue with a recent Apache update that causes proxied sites to return a "421 Misdirected Request" error. Please see the following article for more information and updates:
Websites show 421 Misdirected Request error while using EA Nginx

CPANEL-40507 - WHM/CPANEL Broke two sites on my server (that I know of) out of the blue today.

Comments

105 comments

  • chalupa
    Will this be ported to the same minor version in the STABLE release 100.0.12 version as well or is the issue only in 102?
    0
  • cPRex Jurassic Moderator
    We're releasing an updated fix in version 102.0.14. This has just been released to Current and will work its way through the tiers quickly.
    0
  • vacancy
    I'm new see to this topic. For a while, we had been experiencing problems such as newly opened accounts in version 102 falling to the default page, opening site b on site a, and not recognizing the certificate for the site after ssl installation. These issues were fixed after rebuildhttpdconf. I will monitor this situation in version 102.0.14.
    0
  • tyuuu
    Hello, my version is 102.0.14 and it seems the issue happen again.
    0
  • Spirogg
    Hello, my version is 102.0.14 and it seems the issue happen again.

    I would suggest you open a ticket so they can check and see what's wrong
    0
  • Spirogg
    Hello, my version is 102.0.14 and it seems the issue happen again.

    PS may be this is the issue - it was added 6 hours ago Domain or Subdomain is missing from Apache conf Justin Dover
    • 6 hours ago
    • Updated
    Follow Symptoms You may encounter errors attempting to load domains on the server, and notice the domain is missing from the Apache configuration. Description In v102, queueprocd was refactored for faster processing which exposed race conditions in child processes. This results in child processes not properly completing, further resulting in missing virtual host entries in the Apache configuration. We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-40348. Follow this article to receive an email notification when a solution is published in the product. Workaround Rebuild the Apache configuration and restart Apache: /scripts/rebuildhttpdconf && /scripts/restartsrv_apache
    0
  • Spirogg
    actually here is another one 2 hours ago Domain or Subdomain is missing from Apache configuration in cPanel version 102.0.14 Brian King
    • 2 hours ago
    • Updated
    Follow Symptoms You may encounter errors attempting to load domains on the server, and notice the domain is missing from the Apache configuration. Description In v102, queueprocd was refactored for faster processing which exposed race conditions in child processes. This results in child processes not properly completing, further resulting in missing virtual host entries in the Apache configuration. In version 102.0.14 a patch was released to address this behavior, but this has persisted in some environments. We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-40577. Follow this article to receive an email notification when a solution is published in the product. Workaround Rebuilding the Apache configuration will repopulate the httpd.conf with the missing vhost(s). After this, you will need to restart the Apache service to apply the change: /scripts/rebuildhttpdconf && /scripts/restartsrv_apache
    0
  • dzmitryby
    Hello. Have same problem with vhost in 11.102.0.14. /scripts/rebuildhttpdconf && /scripts/restartsrv_apache helps...
    0
  • vacancy
    There is a case of CPANEL-40577 for the problem persisting in version 102.0.14 as well.
    0
  • JoseDieguez
    i can confirm this problem persists on latest cpanel version. it's hard to believe we have been giving explanations to our clients as of why their websites just dissapears...
    0
  • cPRex Jurassic Moderator
    Update - we're releasing an updated fix in version 102.0.15. I plan to post a MUCH more details response soon, but I'm working with the development team on that still.
    0
  • cPRex Jurassic Moderator
    UPDATE I want to start by acknowledging your frustration with the time that it has taken to resolve this ongoing issue, and assure you that we are making every effort to resolve this issue as soon as possible. I'm hoping this explanation will show why this took longer to resolve than a typical high-priority case. The process that we use to update the Apache configuration on a cPanel has gotten quite complex through the years, and there are now several different subsystems of code that come into play. To name a few: 1. The domain/account creation logic 2. The task queue (queueprocd) that we use to asynchronously perform tasks 3. The file locking logic that we use ensure that multiple processes do not attempt to read/write to httpd.conf at the same time 4. The logic to surgically insert VirtualHost's into the apache configuration 5. The logic to restart apache after the configuration has been built Unfortunately, we have had difficulty replicating this issue in even a semi-infrequent capacity in our internal testing infrastrure, which has made it far more difficult for us to track the root cause of the issue. After looking at the data from affected servers, we were able to identify that this was occurring when a new domain/account was added to the server, and that the issue itself was a race condition that occurred from asynchronous tasks that are offloaded to queueprocd during domain/account creation. The first attempt to resolve this issue (102.0.12) did three things: 1. It updated queueprocd's logic to force certain processes to perform sequentially in order to remove the chances of the race condition occurring 2. It updated the domain/account creation logic so that the certain processes were offloaded to queueprocd faster 3. It added some debug logging to help us analyze the issue further in the event that the first two changes did not resolve the issue The second attempt to resolve this issue (102.0.14) was a targeted change that added logic to rebuild the userdata in the event that it was missing (the race condition occurred). Due to the complexity of the logic that we use to surgically insert VirtualHost's into the apache configuration, it turned out that this code path was not reached every single time that a new domain/account is created on a server. The third attempt to resolve this issue, which will be released in 102.0.15, does two things: 1. It resolves a specific race condition that was found in the logic we use to update the userdata during domain and account creation. This race condition was identified as a direct result of the additional debug logging that we added during our first attempt to resolve this issue. 2. In the event the issue is not completely resolved with the 102.0.15 update, although we do hope this takes care of things, we've added additional debug logging to one of the code path's that is taken when new domains are added to the server to help us analyze this issue further. We plan to release 102.0.15 soon after it goes through final testing on our end.
    0
  • JoseDieguez
    UPDATE 1. It resolves a specific race condition that was found in the logic we use to update the userdata during domain and account creation. This race condition was identified as a direct result of the additional debug logging that we added during our first attempt to resolve this issue. We plan to release 102.0.15 soon after it goes through final testing on our end.

    i just want to comment, that we have reported 2-3 cases at least (but have seen many many more, it's just that we can't keep clients waiting), and i'm pretty sure, that those were not domain-account creation cases. even on this thread, there are comments of accounts that failed to create-renew SSL (because of AutoSSL-Sectigo issues) that causes the issues. (or i'm mixing stuff, because i'm following a few threads on this forums) But, personally saw a case that an account that failed renewing the SSL (because of autossl-sectigo issue), and after the SSL expired, and we forced (manually running autossl few times) getting the SSL installed, this bug showed up.
    0
  • cPRex Jurassic Moderator
    This case isn't directly related to the SSL renewal, but any change to the Apache configuration can trigger this particular issue. We're hoping to release 102.0.15 today, and I'll post an update when that happens.
    0
  • cPRex Jurassic Moderator
    102.0.15 is being moved to Current shortly. If that goes well, which it likely will, Release will be soon to follow.
    0
  • cPRex Jurassic Moderator
    0.15 has been pushed to Release now!
    0
  • azadhussnain
    Hello, Frequently every two three day customers are reporting me that their website is redirecting to default web page, i thought it is an SSL issue so i gone to cPanel -> Lets Encrypt SSL and tried to issue SSL but i got this error : error code 403 urn:ieft:params:acme:error:unauthorized I tried to reinstall apache and it worked but i got another solution also just remove all txt records and then reissue certificate. but reinstalling apache and removing txt records is a temporary solution bcz after few day an another customer will come and say about this issue. I was looking about a permanent solution for this issue. is it fixed in 0.15 ?
    0
  • cPRex Jurassic Moderator
    While it's still early in the day here, we're seeing MUCH better results with 0.15 at this point.
    0
  • JoseDieguez
    While it's still early in the day here, we're seeing MUCH better results with 0.15 at this point.

    We just got a case, but for a very big website, that we couldn't have on that state before fixing it for them. the server is 0.15 is it possible for the "issue" happens on 0.14 version... later update the server to 0.15 version, and the issue remains on that account? just trying to imagine a situation to justify the issue on the 0.15 .
    0
  • cPRex Jurassic Moderator
    @JoseDieguez - yes, if the site was in a broken state in .14 it wouldn't have been fixed as part of the update to .15, but would have needed to be manually adjusted, so that's totally possible.
    0
  • ServerAdminSD
    @JoseDieguez - yes, if the site was in a broken state in .14 it wouldn't have been fixed as part of the update to .15, but would have needed to be manually adjusted, so that's totally possible.

    We are running on .15 as well and are still experiencing issues. In your comment you mention "would have needed to be manually adjusted". Can you describe this a little bit more or post an example of how to do this or will "/scripts/rebuildhttpdconf && /scripts/restartsrv_apache" solve the problem? Ps. If you need an example of a server that is experiencing issues right now to do some testing or analyse logs please send me a DM. On this server the issue occurred today and we decided to not change anyting so we have a testcase to analyse.
    0
  • Jamira40
    Just reported twice with 0.15 release. Twice per two hours with same site.
    0
  • Jamira40
    Okey another two reports. Same issue on 0.15
    0
  • cPRex Jurassic Moderator
    Thanks for letting me know, everyone - I've passed those reports along.
    0
  • Steini Petur
    Same issue on our server, Posted today at 14:07 This website has been down too for the same SSL problem I think. REDACTED THE DOMAIN Server is Operating SystemCloudLinux v6.10.0 ProductcPanel & WHM v102.0.15 (STANDARD) Ran the rebuildhttpdconf and fixed it for him, he thought it was an SSL problem but it turned out that it was "default page" issue which usually is because of the vhost record, soI can confirm that even on 102.0.15 we're getting it
    0
  • dzmitryby
    WHM 102.0.15. Still loses SSL domains. rebuildhttpdconf fixes it.
    0
  • Steini Petur
    WHM 102.0.15. Still loses SSL domains. rebuildhttpdconf fixes it.

    Yeah this is happening so much with us now our board is just flaming with "SSL" questions" and it's always the same, it's the rebuildhttpdconf, at this point you wonder if you should just crontab the rebuildhttpdconf every 30 minutes. I attached our board, just after isolating anything mentioning "SSL" and its never "help installing SSL" its just "SSL is broken" Got to say this is getting a bit annoying after the v102.. PS: Be reminded its just those with SSL in title or body, some are just "HELP HELP MY WEBSITE IS DOWN!" no one mentions SSL we just fix it.. please cPanel figure this out soon..
    0
  • azadhussnain
    In 102.0.14 there is a issue, i installed FleetSSL after 1-2 days i am unable to see Lets Encrypt SSL option in cPanel, i tried running yum -y install letsencrypt-cpanel it gives that it is already installed. Then i have removed letsencrypt-cpanel and installed it again and it fixed the issue but it also happens frequently
    0
  • JoseDieguez
    i can confirm the error still happens on .15
    0
  • Joe A
    Hello. I am not sure if this is related, but we made a change in the Apache Configuration yesterday, specifically increasing the max request workers. After saving and restarting apache, a few minutes later, 2 of the domains start getting SSL Configuration errors. After a few forced Auto SSL and update and reverting back to the original max request workers, the sites were working again.
    0

Please sign in to leave a comment.