Различия

Показаны различия между двумя версиями страницы.

--- wiki:other:lets_encrypt_errors [2023/06/01 17:44] – создано Diman
+++ wiki:other:lets_encrypt_errors [2023/06/01 17:58] (текущий) – Diman
@@ Строка 1: / Строка 1: @@
-====== Ошибки Letsencypt ======
+====== Ошибки Letsencrypt ======
+===== 1 случай =====
 При продлении сертификата появились ошибки с предложением подождать 168 часов.
-<quote>
+<code bash>
-Attempting to renew cert (DOMAIN.ru) from /etc/letsencrypt/renewal/DOMAIN.ru.conf produced an unexpected error: urn:ietf:params:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: DOMAIN.ru, retry after 2023-06-02T21:57:31Z: see https://letsencrypt.org/docs/duplicate-certificate-limit/. Skipping.
+Attempting to renew cert (DOMAIN.ru) from /etc/letsencrypt/renewal/DOMAIN.ru.conf
-</quote>
+produced an unexpected error: urn:ietf:params:acme:error:rateLimited ::
+There were too many requests of a given type :: Error creating new order :: too many certificates (5)
+already issued for this exact set of domains in the last 168 hours: DOMAIN.ru, retry after
+-06-02T21:57:31Z: see https://letsencrypt.org/docs/duplicate-certificate-limit/. Skipping.
+</code>
+Установка и попытка обновить через acme.sh успеха не имела: сертификат не продлевался.
+<code bash>
+Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:unauthorized","status":401,"detail":"A requested identifier is not permitted [DOMAIN.ru]"}
+</code>
+Пришлось сменить сервер сертификации и дело пошло на лад:
+<code bash>
+./acme.sh --debug --log --set-default-ca --server letsencrypt
+</code>
+<code bash [enable_line_numbers="true",highlight_lines_extra="2,3"]>
+[Thu Jun  1 17:11:56 MSK 2023] Using server: https://acme-v02.api.letsencrypt.org/directory
+[Thu Jun  1 17:11:56 MSK 2023] Running cmd: setdefaultca
+[Thu Jun  1 17:11:56 MSK 2023] Changed default CA to: https://acme-v02.api.letsencrypt.org/directory
+</code>