# How long I got block from invalid authorization?

**URL:** <https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584>\
**Category:** Help\
**Created:** [April 7, 2017, 12:44pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584 "2017-04-07T12:44:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sarit](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sarit/32/29847_2.png) [@sarit](https://community.letsencrypt.org/u/sarit)\
**Post date:** [April 7, 2017, 12:44pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584/1 "2017-04-07T12:44:07Z")

</div>

I tried multiple time configure the nginx and then I got block from multiple authentication  
I have `chmod 777 -R /home` already

My IP address also bind to A Record already. At least customer claims that  
What is wrong with my configuration?

Here is my `/etc/nginx/site-enable/cmoc`

```auto
upstream app {
   server localhost:8000;
}

server {
   listen 80;

   root /home/web/cmoc-web;

   server_name cmoc.beenets.com;

   location / {
           proxy_pass_request_headers on;
           proxy_set_header Host $host;
 	   proxy_set_header X-Forwarded-Proto $scheme;
           proxy_pass http://app;
   }

   location ~ /.well-known{
	   allow all;
   }

}

```

`/etc/nginx/nginx.conf`

```auto
user www-data;
worker_processes 4;
pid /run/nginx.pid;

events {
	worker_connections 768;
}

http {
	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	access_log /var/log/nginx/access.log;
	error_log /var/log/nginx/error.log;

	gzip on;
	gzip_disable "msie6";

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}

```

```auto
certbot-auto certonly -a webroot --webroot-path=/home/web/cmoc-web -d cmoc.beenets.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
An unexpected error occurred:
There were too many requests of a given type :: Error creating new authz :: Too many invalid authorizations recently.
Please see the logfiles in /var/log/letsencrypt for more details.

```

---

<div class="post-metadata">

**Author:** ![andreyev](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/andreyev/32/3272_2.png) [@andreyev](https://community.letsencrypt.org/u/andreyev)\
**Post date:** [April 7, 2017, 2:30pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584/2 "2017-04-07T14:30:12Z")

</div>

I guess that you should wait a hour... From [https://letsencrypt.org/docs/rate-limits/:](https://letsencrypt.org/docs/rate-limits/:)

> We recently (April 2017) introduced a Failed Validation limit of 5 failures per account, per hostname, per hour. This limit will be higher on staging so you can use staging to debug connectivity problems.

😕

## HIH!

Andreyev

---

<div class="post-metadata">

**Author:** ![cpu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/cpu/32/84514_2.png) [@cpu](https://community.letsencrypt.org/u/cpu)\
**Post date:** [April 7, 2017, 2:30pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584/3 "2017-04-07T14:30:51Z")

</div>

Hi Sarit,

> [@sarit](#):
>
> I tried multiple time configure the nginx and then I got block from multiple authentication  
> How long I got block from invalid authorization?

The [rate limit documentation page says](https://letsencrypt.org/docs/rate-limits/):

> We recently (April 2017) introduced a Failed Validation limit of 5 failures per account, per hostname, per hour. This limit will be higher on staging so you can use staging to debug connectivity problems.

So the answer is 1 hour. You should also try using the staging environment while you iron out your issuance trouble.

---

<div class="post-metadata">

**Author:** ![sarit](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sarit/32/29847_2.png) [@sarit](https://community.letsencrypt.org/u/sarit)\
**Post date:** [April 7, 2017, 2:51pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584/4 "2017-04-07T14:51:08Z")

</div>

Thank you andreyev and cpu. I have been using LE for a couple of months.  
This is up2date information for me.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 7, 2017, 3:01pm UTC](https://community.letsencrypt.org/t/how-long-i-got-block-from-invalid-authorization/31584/5 "2017-05-07T15:01:54Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.