Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

服务的启动失败了 日志如下 #882

Closed
toyo2333 opened this issue Dec 28, 2023 · 8 comments
Closed

服务的启动失败了 日志如下 #882

toyo2333 opened this issue Dec 28, 2023 · 8 comments
Labels
bug Something isn't working

Comments

@toyo2333
Copy link

docker配置的,之前一直使用正常。今天修改了一个增加了一个分流规则启动失败了。后来改回去启动还是失败的

日志:
2023-12-28T02:33:05Z FATAL failed to load server config {"error": "invalid config: acme.domains: xxxx.org: renewing certificate: [xxxx.org] Renew: [xxxx.org] creating new order: attempt 1: https://acme-v02.api.letsencrypt.org/acme/new-order: HTTP 429 urn:ietf:params:acme:error:rateLimited - Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/ (ca=https://acme-v02.api.letsencrypt.org/directory)"}

我看这意思是证书相关的问题,可这一块没有做过改动。域名解析检查也是正常的。

请问该怎么办呢?

@toyo2333 toyo2333 added the bug Something isn't working label Dec 28, 2023
@toyo2333
Copy link
Author

再补充些日志

2023-12-28T03:14:06Z    INFO    server mode
2023-12-28T03:14:06Z    INFO    renew   acquiring lock  {"identifier": "xxx.org"}
2023-12-28T03:14:06Z    INFO    renew   lock acquired   {"identifier": "xxx.org"}
2023-12-28T03:14:06Z    INFO    maintenance     started background certificate maintenance      {"cache": "0xc00010cfc0"}
2023-12-28T03:14:06Z    INFO    renew   renewing certificate    {"identifier": "xxx.org", "remaining": 1294236.384248868}
2023-12-28T03:14:06Z    INFO    waiting on internal rate limiter        {"identifiers": ["xxx.org"], "ca": "https://acme-v02.api.letsencrypt.org/directory", "account": "test@xxx.com"}
2023-12-28T03:14:06Z    INFO    done waiting on internal rate limiter   {"identifiers": ["xxx.org"], "ca": "https://acme-v02.api.letsencrypt.org/directory", "account": "test@xxx.com"}
2023-12-28T03:14:06Z    ERROR   renew   could not get certificate from issuer   {"identifier": "xxx.org", "issuer": "acme-v02.api.letsencrypt.org-directory", "error": "HTTP 429 urn:ietf:params:acme:error:rateLimited - Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/"}
2023-12-28T03:14:06Z    INFO    renew   releasing lock  {"identifier": "xxx.org"}
2023-12-28T03:14:06Z    FATAL   failed to load server config    {"error": "invalid config: acme.domains: xxx.org: renewing certificate: [xxx.org] Renew: [xxx.org] creating new order: attempt 1: https://acme-v02.api.letsencrypt.org/acme/new-order: HTTP 429 urn:ietf:params:acme:error:rateLimited - Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/ (ca=https://acme-v02.api.letsencrypt.org/directory)"}

而我去acme官方工具https://letsdebug.net/ 下面测试了 DNS-01和TLS-ALPN-01两种方式 我的域名都是正常成功的。

@toyo2333
Copy link
Author

我换了一个域名,还是同样的错误。

我不是很理解,我同样的配置用了几个月都正常,怎么重启一次就这样了。(期间也重启很多次,每次更新版本也回重启docker)

@toyo2333
Copy link
Author

又试了之前备份过的配置文件启动也是报错了

2023-12-28T04:11:33Z ERROR acme_client challenge failed {"identifier": "xxxx.org", "challenge_type": "tls-alpn-01", "problem": {"type": "urn:ietf:params:acme:error:tls", "title": "", "detail": "ip.ip.ip.ip: remote error: tls: internal error", "instance": "", "subproblems": []}}

但这个域名在https://letsdebug.net/ 用tls-alpn-01 测试是通过的,成功的。在你这里就不行了。

@mritd
Copy link
Collaborator

mritd commented Dec 28, 2023

不要再尝试了, 明天再试; 或者你换 ZeroSSL

Let's Encrypt 官方有限速的, 你前几次错误已经触发了限速

@toyo2333
Copy link
Author

不要再尝试了, 明天再试; 或者你换 ZeroSSL

Let's Encrypt 官方有限速的, 你前几次错误已经触发了限速

hy2里怎么配置 来使用这个zero?

@toyo2333
Copy link
Author

不要再尝试了, 明天再试; 或者你换 ZeroSSL

Let's Encrypt 官方有限速的, 你前几次错误已经触发了限速

我按配置换了zero,提示这个错误

acme_client challenge failed {"identifier": "xxxx.org", "challenge_type": "http-01", "problem": {"type": "", "title": "", "detail": "", "instance": "", "subproblems": []}}

怎么改成dns 或者tls燕子呢? 或者我怎么启动http-01验证呢?不会配置。

@toyo2333
Copy link
Author

我把docker关掉了。等一周后再试一试

@toyo2333
Copy link
Author

今天试了下已经好了。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants