You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Create new order error. Le_OrderFinalize not found. {
"type": "urn:ietf:params:acme:error:rateLimited",
"detail": "Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: ui.brucke.link: see https://letsencrypt.org/docs/rate-limits/",
"status": 429
}
At first glance, possible solutions are:
actually store generated certificates (proper way imo);
do restarts less often (e.g. every other day).
The text was updated successfully, but these errors were encountered:
Merged #1554 that should fix this. However keeping this opened for a while until the current rate-limiting window expires and we can check that the issue is actually fixed.
The certificates seem to be downloaded in the persisted volume:
[Wed Aug 24 12:03:35 UTC 2022] Your cert is in /etc/acme.sh/admin@parity.io/grafana.millau.brucke.link/grafana.millau.brucke.link.cer
[Wed Aug 24 12:03:35 UTC 2022] Your cert key is in /etc/acme.sh/admin@parity.io/grafana.millau.brucke.link/grafana.millau.brucke.link.key
[Wed Aug 24 12:03:35 UTC 2022] The intermediate CA cert is in /etc/acme.sh/admin@parity.io/grafana.millau.brucke.link/ca.cer
[Wed Aug 24 12:03:35 UTC 2022] And the full chain certs is there: /etc/acme.sh/admin@parity.io/grafana.millau.brucke.link/fullchain.cer
[Wed Aug 24 12:03:35 UTC 2022] Installing cert to:/etc/nginx/certs/grafana.millau.brucke.link/cert.pem
[Wed Aug 24 12:03:36 UTC 2022] Installing CA to:/etc/nginx/certs/grafana.millau.brucke.link/chain.pem
[Wed Aug 24 12:03:36 UTC 2022] Installing key to:/etc/nginx/certs/grafana.millau.brucke.link/key.pem
[Wed Aug 24 12:03:36 UTC 2022] Installing full chain to:/etc/nginx/certs/grafana.millau.brucke.link/fullchain.pem
Waiting a couple more days to make sure that the issue doesn't reproduce.
The issue doesn't seem to reproduce and from the logs it seems that the certificates are persisted and aren't renewed on every restart:
Creating/renewal grafana.millau.brucke.link certificates... (grafana.millau.brucke.link grafana.rialto.brucke.link)
[Mon Aug 29 05:01:52 UTC 2022] Domains not changed.
[Mon Aug 29 05:01:52 UTC 2022] Skip, Next renewal time is: Sun Oct 23 12:03:35 UTC 2022
[Mon Aug 29 05:01:52 UTC 2022] Add '--force' to force to renew.
Right now we're hitting 5 certs/week limit (https://letsencrypt.org/docs/rate-limits/) when generating certificates for our test deployments nodes:
At first glance, possible solutions are:
The text was updated successfully, but these errors were encountered: