[Eisfair] Let's encrypt
Daniel Kubein
kuba_ at web.de
So Feb 10 05:22:40 CET 2019
Hallo Marcus,
>>
>> DEHYDRATED_MODE='live'
>
> Bis zum Funktionieren würde ich den test-Modus nehmen, sonst könntest du in
> eine Zeitsperre, wegen zu vieler Versuche landen.
>
Verdammt, zu spät.
Nun ist es passiert.
File /etc/config.d/certs_dehydrated saved
Checking configuration file ...
Configuration file was saved as certs_dehydrated.2019-02-10-05-19-32 in
/etc/backup.d.
Activate configuration now (y/n) [yes]? y
version: v1.1.2
creating domains.txt file ...
creating well-known configuration ...
creating certs_dehydrated configuration ...
creating index.html file ...
creating files/links required by eisfair ...
+ domain 'superkubi.selfhost.eu':
- skipped.
checking package usage definition ...
checking symbolic links to certificate ...
+ domain 'superkubi.selfhost.eu':
- link 'apache.pem' ok.
- link 'exim.pem' ok.
- link 'imapd.pem' ok.
- link 'ipop3d.pem' ok.
- link 'pure-ftpd.pem' ok.
looking for dead symbolic link to certificate files ...
adding cronjob ...
creating logrotate configuration ...
Creating Apache2 configuration ...
activating modules...
done activating modules
apache2-mod_brotli: activate
requesting/updating certificate(s) ...
# INFO: Using main config file /etc/dehydrated/config
Processing superkubi.selfhost.eu
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting authorization for superkubi.selfhost.eu...
+ 1 pending challenge(s)
+ Deploying challenge tokens...
+ Responding to challenge for superkubi.selfhost.eu authorization...
+ Challenge is valid!
+ Cleaning challenge tokens...
+ Requesting certificate...
+ ERROR: An error occurred while sending post-request to
https://acme-v01.api.letsencrypt.org/acme/new-cert (Status 429)
Details:
HTTP/1.1 100 Continue
Expires: Sun, 10 Feb 2019 04:20:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
HTTP/1.1 429 Too Many Requests
Server: nginx
Content-Type: application/problem+json
Content-Length: 202
Boulder-Requester: 50578512
Replay-Nonce: v5Wr8g6lu6FzE2QgZiSHwJXhjdoTLzKQFxUSaAg5YoU
Expires: Sun, 10 Feb 2019 04:20:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 10 Feb 2019 04:20:06 GMT
Connection: close
{
"type": "urn:acme:error:rateLimited",
"detail": "Error creating new cert :: too many certificates already
issued for: selfhost.eu: see https://letsencrypt.org/docs/rate-limits/",
"status": 429
}
finished.
Gruß Daniel
Mehr Informationen über die Mailingliste Eisfair