LetsEncrypt staff recently posted Automatic Pausing of Zombie Clients I have a question, I am sure others do as well: [image] Automatic Pausing of Zombie Clients If you are an ACME client author: Ensure that your client returns errors from the API during every attempted certificate issuance. …

Details about this, including a sample error message, have been previously shared here: [image] Feedback needed for our new account "pausing" feature and self-service "unpause" portal Site Feedback B…

Specifically the error log comes from boulder/wfe2/wfe.go at d64132eebcad22f8f68f1b4f541b7a5f85609159 · letsencrypt/boulder · GitHub

Since my question is directly part of OP's quoted text block above from the recent email, I'm wondering if the "automated" certificate renewal is now going away? I have my servers automated to renew their certs every 3 months via the LE64.exe client in batch files running under Windows, I can't affo…

@mushu If your renewals are successful, you're not a "zombie client", so you're not affected. This measure is only for these failing clients that are NOT actually issuing certificates, but are only flooding the ACME server with requests that will fail. Obviously Let's Encrypt wouldn't mess up autom…

Thank you for the clarification, it's appreciated.

This was already enabled on production though and this announcement is just for staging right? I'm sure I've seen production status reports to that effect a while ago.

Not sure if I'm understanding you correctly, @webprofusion , but the linked API announcement says this: [image] Automatic Pausing of Zombie Clients The Let’s Encrypt’s Staging Environment will enable automatic zombie client pausing on 2024-12-03 followed by the Production Environment change on 20…

[image] griffin: Not sure if I'm understanding you correctly Yeah I was clarifying that this announcement was specifically about Staging because it's already happening in Production (no idea if it's fully enabled or just past a certain threshold). Users with lots of failures already get pause…

Hmm... wasn't aware of this. :thinking: Also didn't find anything about it on the rate limits page .

What’s new is automatic pausing. All previous pausing was done in a single manual batch.

Questions: Automatic Pausing of Zombie Clients

Issuance Tech

Nummer378 December 2, 2024, 6:42pm 2

Details about this, including a sample error message, have been previously shared here:

Topic		Replies	Views
Automatic Pausing of Zombie Clients API Announcements	2	1201	December 5, 2024
Possible new feature: paused ACME accounts Issuance Tech	34	3010	April 8, 2021
Letsencrypt ACME unpause link not working Help	11	774	March 21, 2025
Rate-limited on staging environment Help	3	154	May 1, 2025
Am I getting account-level rate-limited? Help	4	200	June 6, 2025

Questions: Automatic Pausing of Zombie Clients

Related topics