[Solved] Unable to issue/renew certs inspite of limit increases and PSL inclusion

Hello! We're unable to fulfill certificate issuance and renewal requests for our domain onporter.run, although we requested a limit increase last year in November, and we also applied for inclusion on the Public Suffix List, which was accepted a couple months back. We've confirmed that there has been no sudden increase in cert requests from our end - would love to know more about this instance, and what could be done to remedy it.

Thanks!

2 Likes

What errors are you seeing?

Your domain was added to the PSL on Feb 19th 2022:

However, if we trace back which PSL version Let's Encrypt currently is using, we find:

https://acme-v02.api.letsencrypt.org/build -> "Boulder=( +dd8be8d7 Tue Mar 22 18:42:32 UTC 2022)"

boulder/go.mod at dd8be8d7b02ce5334063286bb70ae4df5f3f73a7 · letsencrypt/boulder · GitHub -> "github.com/weppos/publicsuffix-go v0.15.1-0.20211029155132-7594db4f858a"

And that commit is, as the above entry also suggests, quite old:

Commits · weppos/publicsuffix-go · GitHub -> "committed on Oct 29, 2021"

Your domain was added to the weppos Go module 29 days ago here: autopull: 2022-03-01T06:00:15Z (#759) · weppos/publicsuffix-go@f627c29 · GitHub

My recommendation is to request an update for the PSL on the Boulder Github page here: Issues · letsencrypt/boulder · GitHub

3 Likes

First off, thanks ever so much for digging into this! Much appreciated. I've gone ahead and requested an update for the PSL on that repo's Issues page. I'll go ahead and close this thread now. Once again, thanks! :slight_smile:

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.