Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com ), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: mail.kf-fantel.com
I ran this command:# sudo /home/by_/.acme.sh/acme.sh --cron --home /home/by_/.acme.sh
Le_Domain=‘mail.kf-fantel.com ’ACME_BASE64__START_L3Vzci9iaW4vc3VkbyAvdXNyL3NiaW4vbmdpbnggLXMgcmVsb2Fk__ACME_BASE64__END ’https://acme-v02.api.letsencrypt.org/acme/finalize/58329194/2214412098 ’https://acme-v02.api.letsencrypt.org/acme/order/58329194/1429845131 ’https://acme-v02.api.letsencrypt.org/acme/cert/03d3b8ea580cc95c5d75f6c449a2c8887137 ’
[Mon Feb 3 01:08:48 YEKT 2020] ===Starting cron===imap.kf-fantel.com ’imap.kf-fantel.com mail.kf-fantel.com ’mail.kf-fantel.com ’https://letsencrypt.org/docs/rate-limits/ ”,mail.kf-fantel.com .
It produced this output:
My web server is (include version):
The operating system my web server runs on is (include version):
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don’t know):
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
1 Like
Create new order error. Le_OrderFinalize not found. {
The server shuts down during certificate creation
1 Like
Hi @kf-fantel
please read the link shared in the error message.
1 Like
Please tell me after how much time you can try to re-issue the certificate?
schoen
February 4, 2020, 12:22am
5
The answer to this is described in a link mentioned in your error log:
For this particular error, it should be one hour.
A certificate request is made once a day at 0:14 for the past month. It seems to me that the problem is different.
The error is most likely in the failure of the command
Hi,
As the error message said, OrderFinalize is not available because you’ve had too many failed attempts in the past hour. Since you are using acme.sh, can you try to check for update and run acme.sh renew then share us the full log (if failed)?
Thank you
Here is the log file
[Mon Feb 3 01:08:48 YEKT 2020] di=’/home/by_/.acme.sh/mail.kf-fantel.com/’mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/directory ’mail.kf-fantel.com ’e[0mmail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’https://acme-v02.api.letsencrypt.org/acme/key-change ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/revoke-cert ’https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf ’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/acme/new-order ’mail.kf-fantel.com ”}]}’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g -I ’https://acme-v02.api.letsencrypt.org/acme/new-order ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’https://letsencrypt.org/docs/rate-limits/ ”,mail.kf-fantel.com .
The acme.sh script runs once a day
The certificate mail.kf-fantel.com.cer was supposed to be re-issued 02.01.2020 was not re-issued. Another certificate imap.kf-fantel.com.cer was issued on 01.01.2020 without problems with the same script
kf-fantel:
[Mon Feb 3 01:08:52 YEKT 2020] Create new order error. Le_OrderFinalize not found. {https://letsencrypt.org/docs/rate-limits/” ,
You have too many failed authorizations
https://letsencrypt.org/docs/rate-limits/
My script runs once a day to reissue 1 certificate, and the link says that no more than 5 certificates per day
The log you give us is the old one. (From the timestamp)
Please try to run acme.sh renew and post us the log for that part.
Thank you
Today I run the script a little later, now there is no way
Thank you
[Wed Feb 5 01:14:05 YEKT 2020] ===Starting cron===imap.kf-fantel.com ’imap.kf-fantel.com mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com mail.kf-fantel.com :Verify error:Fetching http://mail.kf-fantel.com/.well-known/acme-challenge/0b06cfkwalbAtnNWTw3GMn5qaolLWm_ai66JN_OovCA: Connection refusedmail.kf-fantel.com .pop.kf-fantel.com ’pop.kf-fantel.com smtp.kf-fantel.com ’smtp.kf-fantel.com
Log file
[Wed Feb 5 01:14:05 YEKT 2020] Lets find script dir.SCRIPT =’/home/by_/.acme.sh/acme.sh’script=’/home/by /.acme.sh/acme.sh’script_home=’/home/by /.acme.sh’https://acme-v02.api.letsencrypt.org/directory ’https://acme-v02.api.letsencrypt.org/directory ’stopRenewOnErrorset_level=‘2’ /.acme.sh/imap.kf-fantel.com/’imap.kf-fantel.com ’ /.acme.shhttps://acme-v02.api.letsencrypt.org/directory ’imap.kf-fantel.com ’e[0mimap.kf-fantel.com mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/directory ’mail.kf-fantel.com ’e[0mmail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory https://acme-v02.api.letsencrypt.org/directory ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’https://acme-v02.api.letsencrypt.org/acme/key-change ’https://acme-v02.api.letsencrypt.org/acme/new-order ’https://acme-v02.api.letsencrypt.org/acme/new-acct ’https://acme-v02.api.letsencrypt.org/acme/revoke-cert ’https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf ’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com ’mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/acme/new-order ’mail.kf-fantel.com ”}]}’https://acme-v02.api.letsencrypt.org/acme/new-nonce ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g -I ’https://acme-v02.api.letsencrypt.org/acme/new-order ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’https://acme-v02.api.letsencrypt.org/acme/order/58329194/2234174573 ’https://acme-v02.api.letsencrypt.org/acme/finalize/58329194/2234174573 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/2644379483 ’https://acme-v02.api.letsencrypt.org/acme/authz-v3/2644379483 ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’mail.kf-fantel.com ’mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g",“token”:"0b06cfkwalbAtnNWTw3GMn5qaolLWm_ai66JN_OovCA ”’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’mail.kf-fantel.com#0b06cfkwalbAtnNWTw3GMn5qaolLWm_ai66JN_OovCA.Jpp0cb3-7Xv3__t5L0FyZLXth2XplvqWRCuzP3Sr5T8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g#http-01#/var/www/htdocs/roundcubemail-1.2.0 ’mail.kf-fantel.com#0b06cfkwalbAtnNWTw3GMn5qaolLWm_ai66JN_OovCA.Jpp0cb3-7Xv3__t5L0FyZLXth2XplvqWRCuzP3Sr5T8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g#http-01#/var/www/htdocs/roundcubemail-1.2.0,’ mail.kf-fantel.com ’mail.kf-fantel.com mail.kf-fantel.com ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’post_url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’ret=‘0’mail.kf-fantel.com :Verify error:Fetching http://mail.kf-fantel.com/.well-known/acme-challenge/0b06cfkwalbAtnNWTw3GMn5qaolLWm_ai66JN_OovCA: Connection refusedclearupdnson_issue_errhttps://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’post_url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/2644379483/MANV4g ’CURL='curl -L --silent --dump-header /home/by /.acme.sh/http.header -g ’ret=‘0’mail.kf-fantel.com . /.acme.sh/pop.kf-fantel.com/’pop.kf-fantel.com ’ /.acme.shhttps://acme-v02.api.letsencrypt.org/directory ’ /.acme.sh/pop.kf-fantel.com’pop.kf-fantel.com ’e[0mpop.kf-fantel.com /.acme.sh/smtp.kf-fantel.com/’smtp.kf-fantel.com ’ /.acme.shhttps://acme-v02.api.letsencrypt.org/directory ’ /.acme.sh/smtp.kf-fantel.com’smtp.kf-fantel.com ’e[0msmtp.kf-fantel.com
Hi,
Could you please confirm your website document root? (You can find that by going to Nginx virtual Host configuration for that site)
Also, can you confirm that the http based port is accessible for all internet? (No geo-based filter etc.)
Thank you
Hello
I checked the connection via VPN to the mail.kf-fantel.com website from different regions it connects normally
Can you confirm your server IP? There is two IPs under this hostname now. (And one of them have connection refused)
Thank you
. For details see: