Exception Request

Help
1

Dear Jacob,

My ACME client stopped working this morning. After that I received a message informing that, starting Feb. 19, 2020, Let’s Encrypt began making multiple domain validation requests from diverse network vantage points.

We developed the client but need more time to work on getting our integration ready for multiple vantage point validation

I tried to fill the exception list form at https://forms.gle/9QN7dxALJVAoRjMKA but I don’t have our ACME account ID, since we only use its public key in the client’s authentication process.

My e-mail is redacted. Can you grant us more time with that information?

Best regards,
Guilherme Rudnitzki

1 Like
2

@lestaff can someone look into this?

Thank you

6 Likes
3

Thanks for the ping @stevenzhu, on it!

7 Likes
4

The account ID should be a URL of the form https://acme-v02.api.letsencrypt.org/acme/acct/12345 (except with a different number than 12345). As this URL is used in the ACME protocol, I would think it should be present somewhere in your configuration or your software, even if it isn’t referred to as an “account ID” there.

2 Likes
5

I found the root problem and the solution!

Some of the secondary servers Let’s Encrypt is now using are hosted in Amazon AWS, which our webservers block by default (too many bad servers attacks).

I created an exception using the common user-agent these servers use, which is:

Mozilla/5.0 (compatible; Lets Encrypt validation server; +https://www.letsencrypt.org).

Please don’t change this user-agent without noticing in advance.

Best,
Guilherme

6

If you plan to continue blocking some HTTP requests, you would be better off using the DNS-01 validation method instead of HTTP-01.

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.