Error creating new account

Help
1

Hi,

I want to install ssl certificate for my clients who mapped to my domain through CNAME.
I am able to generate ssl certificate and install behalf of them. Till now no issue, but I got error while creating user

"urn:ietf:params:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new account :: too many registrations for this IP: see Registrations Per IP Limit - Let's Encrypt"

and this is my code for creating acme account

user_key = josepy.JWKRSA(key=rsa.generate_private_key(public_exponent=65537,key_size=2048,backend=default_backend()))    
net = client.ClientNetwork(user_key, user_agent=USER_AGENT)
directory = messages.Directory.from_json(net.get(DIRECTORY_URL).json())
client_acme = client.ClientV2(directory, net=net)
account_created = messages.NewRegistration.from_data(email=(EMAIL), terms_of_service_agreed=True)
regr = client_acme.new_account(account_created)

How can i surpass the issue without creating new account?
I should be able to generate ssl certificate regardless of the requests i get without any errors.

2

You'd have to save both the private key and the account (the regr) to disk if they don't exist, or load them from disk if they do. That way, you will use the same ACME account every time your program runs and avoid having to create new ones.

If you're not comfortable implementing these parts yourself using the acme library, I highly recommend just using an existing ACME client rather than piecing this together with Python code.

3 Likes
3

you mean to save both user_key and regr?

4

Yes, both of those.

3 Likes
5

for generating ssl certificate for other domain, I just need to load those files and skip the following steps,

user_key = josepy.JWKRSA(key=rsa.generate_private_key(public_exponent=65537,key_size=2048,backend=default_backend()))    
net = client.ClientNetwork(user_key, user_agent=USER_AGENT)
directory = messages.Directory.from_json(net.get(DIRECTORY_URL).json())
client_acme = client.ClientV2(directory, net=net)
account_created = messages.NewRegistration.from_data(email=(EMAIL), terms_of_service_agreed=True)
regr = client_acme.new_account(account_created)

if yes, how can I load those files and reuse the 'client_acme' for creating new order and challenge

6

You can find examples of loading and saving in the Certbot code.

Loading:

Saving:

It's basically just using json_loads and json_dumps.

4 Likes
7

one small confirmation,

I have created user_key and regr and saved those files in json.
for next order and challenge(to new domain) i will just read user_key and regr from files saved as mentioned above.

So, my doubt is like should i regenerate net, directory and client_name with user_key or just read those values from regr. if yes, please provide some code example
NOTE: once I have read regr it shows

RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-staging-v02.api.letsencrypt.org/acme/acct/86673873', new_authzr_uri=None, terms_of_service=None)

for user_key:

JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPrivateKey object at 0x7f6489c142e0>)>)

please let me know as I am new to this concept.

Thanks.

1 Like
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.