saneatsu
9/27/2019 - 1:47 AM

🚨 Letsencrypt 429 too many certificates already issued for exact set of domains

429_error.md
content_copyfile_download
  • Rendered
  • Source

エラー

Letsencriptで以下のようなエラーが発生。


| Response Code: 429
| Response: {
|   "type": "urn:ietf:params:acme:error:rateLimited",
|   "detail": "Error creating new order :: too many certificates already issued for exact set of domains: chatbotsystem.algoage.net: see https://letsencrypt.org/docs/rate-limits/",
|   "status": 429
| }
| ================================================================================
| Failed to sign chatbotsystem.algoage.net, is DNS set up properly?
| ================================================================================
| Failed to obtain certs for chatbotsystem.algoage.net
| [cont-init.d] 20-setup: exited 0.

原因

証明書の発行枚数制限に引っかかっているっぽい。（参考1）

crt.shで調べてみた。けどいまいち見方がわからない...。 https://crt.sh/?q=%25chatbotsystem.algoage.net

解決方法

以下のように毎回新規作成するようになっていたのが原因。
因みに、ssl_certs:/var/lib/https-portalというふうにやることで毎回新規に作成せずにそこにあるものを参考にするようになる。

  chatbot_wiki_https_portal:
    image: steveltn/https-portal:1
    restart: always
    volumes:
      - ../chatbot_wiki/https-portal/log:/var/log/nginx/
      - ../chatbot_wiki/https-portal/shared:/shared
      - ../chatbot_wiki/https-portal/shared/default.ssl.conf.erb:/var/lib/nginx-conf/default.ssl.conf.erb
      - ../chatbot_wiki/ssl_certs:/var/lib/https-portal
    environment:
      DOMAINS: 'chatbotsystem.algoage.net'
      STAGE: 'production'
      FORCE_RENEW: 'true' # Delete this

参考