Failed Validation Limits

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: dhis2.mohs.gov.sl

I ran this command:
lxc exec proxy -- service apache2 stop
lxc exec proxy -- certbot certonly --non-interactive --standalone --agree-tos -m $EMAIL -d $FQDN
lxc exec proxy -- a2dissite 000-default
lxc exec proxy -- a2ensite apache-dhis2
lxc exec proxy -- service apache2 reload
lxc exec proxy -- service apache2 start
# setup auto renewal
lxc exec proxy -- echo '0 3 * * * root certbot renew --standalone --pre-hook="service apache2 stop" --post-hook="service apache2 start"/' > /etc/cron.d/certbot

It produced this output:
An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many failed authorizations recently: see Failed Validation Limit - Let's Encrypt
My web server is (include version):

The operating system my web server runs on is (include version): Linux

Please when do I expect to have my domain again after violation of limit

2

You can find out on the rate limit documentation page linked in the error itself.

In the mean while please use the staging environment for testing, as the real problem is now obfuscated by the current 'too many failed autz' error.

2 Likes
3

...and if you're running an Apache web server, why stop it and then run certbot in --standalone mode? A much more sensible way to proceed would be to use certbot in webroot mode: certbot certonly -w /var/www/html -d dhis2.mohs.gov.sl --post-hook "service apache2 reload" (with the webroot path naturally changed as appropriate), and then the autorenewal would be just certbot renew.

But before you do that, you need to publish DNS records for dhis2.mohs.gov.sl, because currently there aren't any.

6 Likes
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.