pixelated / puppet-pixelated

Puppet Module to setup the Pixelated User Agent
GNU Affero General Public License v3.0
13 stars 4 forks source link

letsencrypt rate limiting #40

Closed cz8s closed 8 years ago

cz8s commented 8 years ago

when building staging, we get followin error:

There were too many requests of a given type :: Error creating new cert :: Too many certificates already issued for exact set of domains: api.staging.pixelated-project.org,nicknym.staging.pixelated-project.org,pixelated.staging.pixelated-project.org,staging.pixelated-project.org
Please see the logfiles in /var/log/letsencrypt for more details.
deniscostadsc commented 8 years ago

@tuliocasagrande knows how to solve this.

varac commented 8 years ago

@tuliocasagrande are you working on this ?

tuliocasagrande commented 8 years ago

We kind of solved this problem when we created a persistent /storage partition and saved the /etc/letsencrypt folder inside of it.

However, before we could store a single letsencrypt certificate, we already had reached the limit. [1] So we need to wait until we get an available slot and we're not going to lose those certificates this time.

[1] https://community.letsencrypt.org/t/rate-limits-for-lets-encrypt/6769

varac commented 8 years ago

there's a dirty, hacky workaround for this: if you add another subject alt name like foo.staging.pixelated-project.org, you can mitigate the rate-limit ;) I did this once playing with letsencrypt and running into the rate limit so you could give it try.

tuliocasagrande commented 8 years ago

We successfully generated new certificates and saved them in /storage partition. 🎉 🎉 🎉