I got an error which wasn't before there


#1

Let’s Encrypt SSL certificate installation failed: Failed letsencrypt execution: 2016-01-21 11:00:35,749:WARNING:letsencrypt.cli:Root (sudo) is required to run most of letsencrypt functionality.
An unexpected error occurred:
The client sent an unacceptable anti-replay nonce :: JWS has invalid anti-replay nonce
Please see the logfiles in /opt/psa/var/modules/letsencrypt/logs for more details.


#2

What do the log files say ?


#3

i can’t copy the log i only can read it with SSH-Termial and it’s really long. Too long to copy.


#4

What are the key points ?

alternatively copy and paste into pastebin if too long for here.


#5

it’s to long to copy it line for line from the ssh terminal


#6

There is usually a way to copy from the ssh terminal - what OS and terminal are you using ?


#7

the log:
www.bastianrickmann.de/ok.log

please don’t wonder i rename the log


#8

getting same error, as above
my platform is centos 6.7 (nginx) (vestacp installed)


#9

if it helps my server:
Betriebssystem ‪Ubuntu 14.04.3 LTS‬
Plesk Version 12.5.30 Update #19, last refresh: 21. Jan. 2016 00:59:45


#10

Well, the original error is gone… :stuck_out_tongue: Now you’ve hit the rate limit of max. 5 certificates per domain per 7 days: https://crt.sh/?Identity=%bastianrickmann.de&iCAID=7395

So… Somewhere, you’ve got the certificates successfully issued to you. I have no clue how Plesk works, but they should be somewhere…


#11

From the logs

Error creating new cert :: Too many certificates already issued for: bastianrickmann.de"


#12

yes i create some but than it began to fail so i delete some and now i can’t create new one :frowning:


#13

https://paste.ee/p/hTjBM here is my log please check this too


#14

is there a way to reset?


#15

unfortunately not - other than wait the 7 days.

Did you delete all of those in the /etc/letsencrypt folder ? or do you still have some there ( because the ones you were issues are perfectly valid if still there 0


#16

any suggestion for me? serverco please check my log too


#17

This looks related to https://github.com/letsencrypt/boulder/issues/1217 ( also discussed in this thread ) I’d suggest checking your domain name at https://crt.sh/ to check how many certs you have had issued ( to check you don’t hit the rate limits) - then test again if you are not close to the 5 certs / domain / 7 days limit