Warning - Let’s Encrypt - help me (cpanel/WHM)

Help
1

Hi,
how to eliminate these problems?

16:19:35 The website “labsektor.labsektor.whosting.pl”, owned by “labsekto”, has a faulty SSL certificate (OPENSSL_VERIFY:0:18:DEPTH_ZERO_SELF_SIGNED_CERT NOT_ALL_DOMAINS). AutoSSL will attempt to replace this certificate.
16:19:35 The website “labsektor.whosting.pl”, owned by “labsekto”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
16:19:35 OSTRZEŻENIE The domain “cpanel.labsektor.com.pl” failed domain control validation: The system queried for a temporary file at “http://cpanel.labsektor.com.pl/.well-known/acme-challenge/A4DWXRK4FUVQK4IHQIQBG5ZI06WZNYI_”, but the web server responded with the following error: 404 (Not Found). A DNS (Domain Name System) or web server misconfiguration may exist.
16:19:36 OSTRZEŻENIE The domain “webdisk.labsektor.com.pl” failed domain control validation: The system queried for a temporary file at “http://webdisk.labsektor.com.pl/.well-known/acme-challenge/FI0VAZA47A9UZ3D8S227ETSKP8NUZCQI”, but the web server responded with the following error: 404 (Not Found). A DNS (Domain Name System) or web server misconfiguration may exist.
16:19:36 OSTRZEŻENIE The domain “webmail.labsektor.com.pl” failed domain control validation: The system queried for a temporary file at “http://webmail.labsektor.com.pl/.well-known/acme-challenge/094T2KCE7-SOD2W8GD26453--4OMZBBS”, but the web server responded with the following error: 404 (Not Found). A DNS (Domain Name System) or web server misconfiguration may exist.
16:19:36 System spróbuje odnowić certyfikaty SSL dla następujących witryn sieci Web:
16:19:36 labsektor.labsektor.whosting.pl (labsektor.com.pl www.labsektor.com.pl mail.labsektor.com.pl labsektor.labsektor.whosting.pl www.labsektor.labsektor.whosting.pl)
16:19:47 OSTRZEŻENIE (XID vxp5m7) The ACME function “https://acme-v01.api.letsencrypt.org/acme/new-cert” indicated an error: “Error creating new cert :: too many certificates already issued for: whosting.pl: see https://letsencrypt.org/docs/rate-limits/ (The request exceeds a rate limit)” (429, “Too Many Requests”, urn:acme:error:rateLimited). at bin/autossl_check.pl line 932.
16:19:47 System zakończył kontrolę AutoSSL dla „labsekto”.

2

https://crt.sh/?q=%.whosting.pl

It looks like you are using whosting.pl as a generic domain for all of the tenants on your cPanel server(s).

You need to apply for a rate limit exclusion or submit whosting.pl to the Public Suffix List if you plan to use the domain in this way, because the rate limits for Let’s Encrypt will not permit you to issue this many certificates otherwise.

You can also change your AutoSSL provider back to the default, Comodo, which, as far as I know, does not have rate limits as severe as those from Let’s Encrypt.

1 Like
3

Is this a general limit? Will this limit disappear, eg after a week?
How to make a Public Suffix List?

4

All of the rate limits are based on a sliding window.

They are documented here:

I think the particular ones you hit are weekly.

You should read the PSL website to see how to apply to the PSL.

1 Like
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.