Limit per week increase

Hi,
is there a way to increase the limit of 50 ssl per week? We are currently moving a lot of VM and need to reissue the certificates.

there is from for that but it'd take weeks so not sure if it'd useful to you
https://isrg.formstack.com/forms/rate_limit_adjustment_request

3 Likes

As an alternative, certificates can usually be moved from old to new hosts manually or using scripting. It depends on what OS and web server combinations you are using and how familiar you are with your https config for each site.

The 50 certs limit is per domain, is so it sounds like your sites are all subdomains of a primary domain?

3 Likes

Ahhh thats the best solution, moving them :smiley: Thank you!! Using ubuntu and certbot

Yeah those all are subdomains from one domain

2 Likes

For server migration you may find other recent threads but the things to look out for with certbot include copying the configuration and recreating symbolic links (live to archive) and permissions, plus ensuring that paths are all updated in any relevant config. Best to try it with a few sites, check they work, then check that renewals also renew properly, then migrate the rest of your sites using the same process.

3 Likes

from chatgpt:

Copy certificate and key:
Copy the certificate files and private key from your Debian server to the Ubuntu server. This could look like this:

sh
scp /etc/letsencrypt/live/your-domain/* user@ubuntu-server:/etc/letsencrypt/live/your-domain/
Copy configuration files:
Copy the configuration files for Certbot if they exist:

scp -r /etc/letsencrypt/renewal/ user@ubuntu-server:/etc/letsencrypt/renewal/
scp -r /etc/letsencrypt/archive/ user@ubuntu-server:/etc/letsencrypt/archive/
Set permissions:
Make sure the permissions are set correctly:

sudo chown -R root:root /etc/letsencrypt
sudo chmod -R 755 /etc/letsencrypt
Install Certbot on the Ubuntu server:
Install Certbot on the Ubuntu server if you haven't already done so:

sudo apt update
sudo apt install certbot
Test renewal:
Test the renewal of the certificates to make sure everything works:
sudo certbot renew --dry-run
Set up automatic renewal:
Certbot usually automatically sets up a cron job or systemd timer to renew the certificates. Check this:
sudo systemctl list-timers

This may work, will try

Yeah I'm not sure how cerbot will behave for renewal if the files in /live are actual files instead of symlinks to the latest archive file but see how you get on.

Don't give too much weight to what chatgtp tells you. Good luck!

2 Likes

yeah indeed its only a hint from chatgpt, its not working :wink:

rsync when used with -a (for "archive") will preserve symlinks and permissions/ownership as far as I know. And I think it's also possible to use rsync over SSH, right?

Anyway, ChatGPT is not a great source. Even the hint to use apt is very outdated, as using snap is currently the recommended method of installing Certbot.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.