Letsencrypt: too many failed authorizations recently

Discussion in 'Installation/Configuration' started by progressed36, Jan 25, 2021.

  1. progressed36

    progressed36 Member

    Hi,
    Created a new server today with 1 website and got the following and debug returned me this:
    {
    "type": "urn:ietf:params:acme:error:rateLimited",
    "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
    "status": 429
    }

    Googling the error you get allot of smartasses with answer: well the detail already says it all donnit?! But in my case i have a NEW server with an IP that should not have any requests made.

    Anybody else experienced the same and perhaps a solution?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You or someone else who owned that IP before requested too many certs in a short amount of time, all you can do is to wait. See the link you posted.
     
  3. progressed36

    progressed36 Member

    Yes and its resetted every week. That IP is in my ownership for 2 weeks now (i own a 28 subnet) and i just started using it today on a new server. When generating the ispconfig interface cert its working perfectly. even the dry-run no errors.

    And when trying it now i get a new error:
    DNS problem: SERVFAIL looking up CAA for DOMAIN- the domain's nameservers may be malfunctioning

    Im not the host for the DNS so i asked to the domainname owner to add teh record:
    CAA 0 issuewild "letsencrypt.org"
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Seems more like a issue with the DNS provider.
     
    progressed36 likes this.
  5. progressed36

    progressed36 Member

    Yes, but on the 19th (for the same domain, other A record) i generated another certificate on another server without issue. Nothing has changed in between. Im scared to try and regenerate that certificate as its a live site.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Check the domain dns setup using e.g. intodns.com
     
  7. progressed36

    progressed36 Member

    It looks ok. nothing strange no red flags.
    CAA record i requested is also added correctly
    3600 IN CAA 0 issuewild "letsencrypt.org"
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Might have been a temporary error then, so unless you are still blocked by the rate limit, you might want to retry it.
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    And just to be sure, double-check for typos in the domain name :)
     
  10. progressed36

    progressed36 Member

    - lol yeah no typos. http is working :)
    - yes im trying every half hour, but i dont think its going to work. Im really stuk now.
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    Always with the same error " SERVFAIL looking up CAA for DOMAIN- the domain's nameservers may be malfunctioning" ?
     
  12. progressed36

    progressed36 Member

    yes. the reason why i started this topic is no more... its constantly nameservers may be malfunctioning
     

Share This Page