[Eisfair] Let's encrypt

Daniel Kubein kuba_ at web.de
So Feb 10 05:22:40 CET 2019


Hallo Marcus,

>>
>> DEHYDRATED_MODE='live'
> 
> Bis zum Funktionieren würde ich den test-Modus nehmen, sonst könntest du in
> eine Zeitsperre, wegen zu vieler Versuche landen.
> 

Verdammt, zu spät.
Nun ist es passiert.


File /etc/config.d/certs_dehydrated saved
Checking configuration file ...

Configuration file was saved as certs_dehydrated.2019-02-10-05-19-32 in 
/etc/backup.d.

Activate configuration now (y/n) [yes]? y

version: v1.1.2
creating domains.txt file ...
creating well-known configuration ...
creating certs_dehydrated configuration ...
creating index.html file ...
creating files/links required by eisfair ...
+ domain 'superkubi.selfhost.eu':
   - skipped.
checking package usage definition ...
checking symbolic links to certificate ...
+ domain 'superkubi.selfhost.eu':
   - link 'apache.pem' ok.
   - link 'exim.pem' ok.
   - link 'imapd.pem' ok.
   - link 'ipop3d.pem' ok.
   - link 'pure-ftpd.pem' ok.
looking for dead symbolic link to certificate files ...
adding cronjob ...
creating logrotate configuration ...
Creating Apache2 configuration ...
activating modules...
done activating modules
apache2-mod_brotli: activate
requesting/updating certificate(s) ...
# INFO: Using main config file /etc/dehydrated/config
Processing superkubi.selfhost.eu
  + Signing domains...
  + Generating private key...
  + Generating signing request...
  + Requesting authorization for superkubi.selfhost.eu...
  + 1 pending challenge(s)
  + Deploying challenge tokens...
  + Responding to challenge for superkubi.selfhost.eu authorization...
  + Challenge is valid!
  + Cleaning challenge tokens...
  + Requesting certificate...
   + ERROR: An error occurred while sending post-request to 
https://acme-v01.api.letsencrypt.org/acme/new-cert (Status 429)

Details:
HTTP/1.1 100 Continue
Expires: Sun, 10 Feb 2019 04:20:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 429 Too Many Requests
Server: nginx
Content-Type: application/problem+json
Content-Length: 202
Boulder-Requester: 50578512
Replay-Nonce: v5Wr8g6lu6FzE2QgZiSHwJXhjdoTLzKQFxUSaAg5YoU
Expires: Sun, 10 Feb 2019 04:20:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 10 Feb 2019 04:20:06 GMT
Connection: close

{
   "type": "urn:acme:error:rateLimited",
   "detail": "Error creating new cert :: too many certificates already 
issued for: selfhost.eu: see https://letsencrypt.org/docs/rate-limits/",
   "status": 429
}

finished.


Gruß Daniel


Mehr Informationen über die Mailingliste Eisfair