Skip to main content

Let's Encrypt Renewals

mgastkemper
I've set up Let'sEncrypt, but I ran into rate limits. I found out that certificates are renewed every day. Search for [removed] on crt.sh | Certificate Search The plugin seems to be up to date:
$ /scripts/install_lets_encrypt_autossl_provider Loaded plugins: fastestmirror, langpacks, universal-hooks Loading mirror speeds from cached hostfile * EA4: 185.69.232.245 * extras: centos.mirror.triple-it.nl * updates: centos.mirror.triple-it.nl Package cpanel-letsencrypt-2.15-7.1.noarch already installed and latest version
It seems the renew attempt is done every day.

Comments

8 comments

Date Votes
  • cPanelMichael
    Hello @mgastkemper, I've moved this post into it's own thread. Could you let us know the specific error message you notice regarding the rate limits under the "Logs" tab in "WHM >> Manage AutoSSL"? Thank you.
    0
  • mgastkemper
    The error in the AutoSSL logs:
    The ACME function "https://acme-v01.api.letsencrypt.org/acme/new-cert" indicated an error: "Error creating new cert :: Too many certificates already issued for: usesfifthgear.com (The request exceeds a rate limit)" (429, "Unknown", urn:acme:error:rateLimited).
    0
  • cPanelMichael
    Hello, Could you open a support ticket using the link in my signature so we can take a closer look and verify how many domain names are associated with the account, and determine why it reached the rate limit? You can post the ticket number here so we can update this thread with the outcome. Thank you.
    0
  • mgastkemper
    I've opened a support ticket: 8258177
    0
  • cPanelMichael
    Hello, Per the support ticket, it looks like the following
    0
  • mgastkemper
    cPanel filed an issue for this problem: CPANEL-11532. They gave no ETA. The following line is copied from there reply: "I have filed CPANEL-11532 in regards to Let's Encrypt rate limiting you due to repeatedly replacing the same certificates on a daily basis due to DNS failures for the subdomains that additional coverage is possible for".
    0
  • cPanelMichael
    cPanel filed an issue for this problem: CPANEL-11352. They gave no ETA. The following line is copied from there reply: "I have filed CPANEL-11532 in regards to Let's Encrypt rate limiting you due to repeatedly replacing the same certificates on a daily basis due to DNS failures for the subdomains that additional coverage is possible for".

    Hello, To update, the case number is CPANEL-11532. I'll update this thread with more information on the status of this case as it becomes available. Thank you.
    0
  • cPanelMichael
    Hello, To update, a resolution associated with internal case CPANEL-11532 is included with cPanel & WHM version 70: Fixed case CPANEL-11532: Supplementary AutoSSL changes for production use of preemptive DCV. The publication of cPanel & WHM 70 to the Release build tier is tentatively planned for the middle of May 2018. Thank you.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post