LEScript.ERROR: 429

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: mail.comporacionavcs.com

I ran this command: “Let’s Encrypt” your mailserver

It produced this output:

[2020-04-21 06:25:03] LEScript.INFO: Getting list of URLs for API
[2020-04-21 06:25:03] LEScript.INFO: Requesting new nonce for client communication
[2020-04-21 06:25:03] LEScript.INFO: Account already registered. Continuing.
[2020-04-21 06:25:03] LEScript.INFO: Sending registration to letsencrypt server
[2020-04-21 06:25:03] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/new-acct
[2020-04-21 06:25:04] LEScript.INFO: Account: https://acme-v02.api.letsencrypt.org/acme/acct/83721608
[2020-04-21 06:25:04] LEScript.INFO: Starting certificate generation process for domains
[2020-04-21 06:25:04] LEScript.INFO: Requesting challenge for mail.corporacionavcs.com
[2020-04-21 06:25:04] LEScript.INFO: Sending signed request to https://acme-v02.api.letsencrypt.org/acme/new-order
[2020-04-21 06:25:05] LEScript.ERROR: 429 {   "type": "urn:ietf:params:acme:error:rateLimited",   "detail": "Error creating new order :: too many certificates already issued for exact set of domains: mail.corporacionavcs.com: see https://letsencrypt.org/docs/rate-limits/",   "status": 429 }
[2020-04-21 06:25:05] LEScript.ERROR: #0 /opt/admin/vendor/analogic/lescript/Lescript.php(544): Analogic\ACME\Client->curl('POST', 'https://acme-v0...', '{"protected":"e...')
[2020-04-21 06:25:05] LEScript.ERROR: #1 /opt/admin/vendor/analogic/lescript/Lescript.php(422): Analogic\ACME\Client->post('https://acme-v0...', '{"protected":"e...')
[2020-04-21 06:25:05] LEScript.ERROR: #2 /opt/admin/vendor/analogic/lescript/Lescript.php(97): Analogic\ACME\Lescript->signedRequest('https://acme-v0...', Array)
[2020-04-21 06:25:05] LEScript.ERROR: #3 /opt/admin/src/AppBundle/Handler/LeHandler.php(62): Analogic\ACME\Lescript->signDomains(Array)
[2020-04-21 06:25:05] LEScript.ERROR: #4 /opt/admin/src/AppBundle/CommandInternal/RenewCommand.php(30): AppBundle\Handler\LeHandler->renew()
[2020-04-21 06:25:05] LEScript.ERROR: #5 /opt/admin/vendor/symfony/symfony/src/Symfony/Component/Console/Command/Command.php(255): AppBundle\CommandInternal\RenewCommand->execute(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
[2020-04-21 06:25:05] LEScript.ERROR: #6 /opt/admin/vendor/symfony/symfony/src/Symfony/Component/Console/Application.php(1005): Symfony\Component\Console\Command\Command->run(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
[2020-04-21 06:25:05] LEScript.ERROR: #7 /opt/admin/vendor/symfony/symfony/src/Symfony/Component/Console/Application.php(255): Symfony\Component\Console\Application->doRunCommand(Object(AppBundle\CommandInternal\RenewCommand), Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
[2020-04-21 06:25:05] LEScript.ERROR: #8 /opt/admin/src/AppBundle/CommandInternal/Application.php(80): Symfony\Component\Console\Application->doRun(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
[2020-04-21 06:25:05] LEScript.ERROR: #9 /opt/admin/vendor/symfony/symfony/src/Symfony/Component/Console/Application.php(148): AppBundle\CommandInternal\Application->doRun(Object(Symfony\Component\Console\Input\ArgvInput), Object(Symfony\Component\Console\Output\ConsoleOutput))
[2020-04-21 06:25:05] LEScript.ERROR: #10 /opt/admin/bin/mailserver(16): Symfony\Component\Console\Application->run(Object(Symfony\Component\Console\Input\ArgvInput))
[2020-04-21 06:25:05] LEScript.ERROR: #11 {main}

My web server is (include version): poste.io mailserver Version: 2.2.19
lts
The operating system my web server runs on is (include version): Ubuntu 18.04.1 LTS

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): Poste.io

2

Hi @Keadanis

you run that command six times. Read the link shared in the error message.

3

Hi Juergen, thanks for your help.
Possibly this happened because I had to install this server several times.
I have the option to correct or reset the letsencrypt certificate or service?

Thanks!

4

The rate limits work on a sliding window.

Renewals are treated specially: they don’t count against your **...a Duplicate Certificate limit of 5 per week. Note: renewals used to count against your Certificate per Registered Domain limit until March 2019, but they don’t anymore. Exceeding the Duplicate Certificate limit is reported with the error message too many certificates already issued for exact set of domains .

1 Like
5

Hi thanks for your help. So I have to wait a week for another certificate?

6

You will have to wait a week to issue a new certificate with the exact set of names. If you create a certificate that includes your domain plus another subdomain that will be considered a new certificate. It will require the second domain to pass validation too.

If possible, you should use the staging server API to test a new set-up. The rate limits are much more generous there and will allow you to test configurations.

1 Like
7

Thanks for your help.

8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.