CloudflareとLet’s Encryptを同時に使ってると、Let’s Encryptが更新できない件

tls: handshake failure

Let's Encryptで更新かけるとき、こんなエラーログが出る

# cd /opt/letsencrypt/
# ./certbot-auto renew
(省略)
Attempting to renew cert from /etc/letsencrypt/renewal/freestylewiki.xyz.conf produced an unexpected error: Failed authorization procedure. freestylewiki.xyz (tls-sni-01): urn:acme:error:tls :: The server experienced a TLS error during domain verification :: remote error: tls: handshake failure. Skipping.

remote error: tls: handshake failure. で検索をかけると原因がわかった。

解決策

serverfault.com

I had Cloudflare running on the site, once I paused it I could renew the certs.

Cloudflareを一時停止状態にすればよいらしい。助かった〜

Cloudflare側の設定

これ

• 一旦DevelopmentModeに変えて

• Pauseを押す

この後、certbot-auto renew を再実行するとうまく更新できた。

There were too many requests of a given type :: Error creating new authz :: Too many invalid authorizations recently.. Skipping.

何回もcertbot-auto renewしてたら、以下のようなわかりやすいエラーが出た。メンゴメンゴ。

Attempting to renew cert from /etc/letsencrypt/renewal/freestylewiki.xyz.conf produced an unexpected error: urn:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new authz :: Too many invalid authorizations recently.. Skipping.

解決策

１時間だけ待つ

• How long I got block from invalid authorization? - Help - Let's Encrypt Community Support

だるいな。

Cloudflare側に証明書もたせる設定もできそうだし、そのほうがいいのかねえ…