WICS was working OK for months, but then was saying "likely firewall Problem"

Issuance Tech
1

I use WICS on Exchange Server 2019. It had been working fine for months, but all of the sudden it stopped working and was giving me this error:

"detail": "x.x.x.x: Fetching http://<fdqn>/.well-known/acme-challenge/rYF6kVvSUrF76CfFGPdDl4W_HilIX7fHlGsey81v2yc: Timeout during connect (likely firewall problem)",

But now I get:

Failed to create order: Error creating new order :: too many failed authorizations recently: see Failed Validation Limit - Let's Encrypt

When reading the Failed Validation Limit - Let's Encrypt it says " Overrides are not available for the Failed Validation limit."

I am not sure what that means. Will it let me retry authorization at some point or not?

Any advice, info on this is appreciated. - Thanks

1 Like
2

Hi @Jkocan, and welcome to the LE community forum :slight_smile:

Yes, per the rate limits, you have exceeded the per hour failed requests.
See: Rate Limits - Let's Encrypt

You should use the testing environment for all such testing.

3 Likes
3

All issuance requests are subject to a Failed Validation limit of 5 failures per account, per hostname, per hour.

From the page you linked - wait an hour

3 Likes
4

And then...
You can troubleshoot the real problem:

2 Likes
5

Ah... Thank you. Hopefully I will be able to figure out the firewall problem. It was working great for months and all of the sudden stopped.

1 Like
6

Often it is because someone blocked port 80 since the last time you got a cert.

3 Likes
7

Like many ISP are doing these days - I still can't grasp any benefit of them doing that.

2 Likes
8

For anyone that is interested. For some reason HTTP must have been blocked at the firewall level. I figured it out by going to the validation URL that was in the request. Also updated to the latest WACS.

So future note to self: make sure http is enabled to the server, not just https.

Thanks for all of your help guys. I really appreciate it.

2 Likes
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.