3 ms·
Pretty risky given the rate limits of Let's Encrypt are non negotiable with no choice but to wait them out.
by cube00 8mo ago
Pretty risky given the rate limits of Let's Encrypt are non negotiable with no choice but to wait them out.
- muvlon 8mo agoThey are quite literally negotiable: https://isrg.formstack.com/forms/rate_limit_adjustment_request https://isrg.formstack.com/forms/rate_limit_adjustment_reque... There are also a bunch of rate limit exemptions that automatically apply whenever you "renew" a cert: https://letsencrypt.org/docs/rate-limits/#non-ari-renewals https://letsencrypt.org/docs/rate-limits/#non-ari-renewals. That means whenever you request a cert and there already is an issued certificate for the same set of identities.
- dextercd 8mo agoYour comment is 100% correct, but I just want to point out that this doesn't negate the risks of bob's approach here. LE wouldn't see this as a legitimate reason to raise rate limits, and such a request takes weeks to handle anyway. Indeed, some rate limits don't apply for renewals but some still do.
- cube00 8mo agoIf you’ve hit a rate limit, we don’t have a way to temporarily reset it. [1] From your link move the adjustments to production twice monthly. I don't know about your use case but I couldn't risk being unable to get a new certificate for at least a fortnight because my container was stuck in a restart loop. [1]: https://letsencrypt.org/docs/rate-limits/ https://letsencrypt.org/docs/rate-limits/