I've been using Lets Encrypt certs on this server for years. This morning when the certs were renewed, one of the domains failed to install the new cert with this message Analyzing “tinyislekauai.com”’s DCV results … 9:15:05 AM Trying 1 wildcard domain (*.tinyislekauai.com) to maximize coverage … …

We’ve now relaxed this temporary rate limit. It’s still in place, but is much more forgiving and should allow you to obtain certificates. Thanks for your patience!

So you are somehow targeting and limiting use of Net::ACME2 perl client? Unlike CPanel, we keep track of when our domains need renewal in a table, so that we do not have to check every cert on our servers, so we are not affected by the same bug affecting CPanel and our request rate has not increased…

[image] timeofmind: So you are (…) Note that most of the users here, myself included, are just volunteers of this Community and not related to Let's Encrypt in any way, besides being users of it like yourself. I'm just re-iterating statements made earlier in combination with my views/interpre…

Yes, the rate limit on this user-agent is a temporary emergency measure.

[image] JamesLE: Evet, bu kullanıcı aracısındaki oran sınırı geçici bir acil durum önlemidir. So, is it clear when this limit will be lifted or eased? We manage a large network, it causes us problems with our customers.

The solution that cPanel has published will have worked in the next /scripts/upcp task on all servers. Many server administrators have already implemented the solution manually.

We disabled the temporary rate limit 13 minutes ago, though that has prompted another bout of extremely high traffic volume. We might need to re-impose a (lighter this time) limit as we monitor.

So to summerise: in effect, a buggy cPanel is DDoS-ing the Let's Encrypt ACME API, mandating mitigating actions which unfortunately affect all users with the same user agent. As Let's Encrypt just has the user agent to work with, it cannot distinguish cPanel users from non-cPanel users.

[image] Osiris: So to summerise: in effect, a buggy cPanel is DDoS-ing the Let's Encrypt ACME API, mandating mitigating actions which unfortunately affect all users with the same user agent. As Let's Encrypt just has the user agent to work with, it cannot distinguish cPanel users from non-cPanel…

There is still a foot problem and the following error WARN AutoSSL failed to create a new certificate order because the server’s Let’s Encrypt account ( https://acme-v02.api.letsencrypt.org/acme/acct/208383230 ) has reached a rate limit. (429 urn: ietf: params: acme: error: rateLimited (The request e…

[image] jessika: : too many certificates (5) This is a more normal rate limit error, that the FQDN has had too many duplicate this period (a sliding 7 day window). Rate Limits - Let's Encrypt Sadly, each certificate requires lots of upkeep over its 90 day lifespan, so we do limit the number…

New certs failed with "A rate limit prevents DCV"

Help

jcjones October 2, 2021, 7:34pm 35

It has not been reinstated. cPanel has no specific rate limits right now.

Cancel Rate Limiting

Topic		Replies	Views
ERROR “Let’s Encrypt™” general error (karpinskieng.com): A rate limit prevents DCV Help	5	868	November 15, 2022
MASTER DCV: A rate limit prevents DCV on all domains Help	8	20221	January 9, 2021
Lets encrypt refusing to connect to my domain on renew , and now it is saying limit reached Help	30	5501	June 21, 2017
MASTER DCV: A rate limit prevents DCV Help	2	842	March 19, 2024
My cprapid master DVC a rate limit prevent DVC Help	9	1001	September 18, 2023

New certs failed with "A rate limit prevents DCV"

Related topics