Dirk's Tech Findings

Froxlor: Let's Encrypt errors for cancelled domain

Publication date: 2020-05-21

Issue: Froxlor master cron job fails every 5 minutes with Let's Encrypt error

When getting up today, my mailbox was full of notifications on failed Froxlor cron script executions.

The script

 /usr/bin/nice -n 5 /usr/bin/php -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --tasks 1> /dev/null

failed with

[Thu 21 May 2020 07:50:13 AM CEST] Create new order error. Le_OrderFinalize not found. {
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429
}
[Thu 21 May 2020 07:50:13 AM CEST] Please add '--debug' or '--log' to check more details.
[Thu 21 May 2020 07:50:13 AM CEST] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

Solution: Remove cancelled domain from Froxlor domain list

The cause of the problem was simple and straight-forward. Two weeks ago I cancelled one of my many domains. When the Let's Encrypt certificate was due for removal, Froxlor attempted to renew it. This failed for obvious reasons (visible in another error notification):

[Thu 21 May 2020 07:55:15 AM CEST] noproblem.biz:Verify error:DNS problem: NXDOMAIN looking up A for noproblem.biz - check that a DNS record exists for this domain
[Thu 21 May 2020 07:55:15 AM CEST] Please add '--debug' or '--log' to check more details.
[Thu 21 May 2020 07:55:15 AM CEST] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

Cancelled domains thus need to be removed from the Froxlor panel so that no certificate renewals are attempted any more.

Back to topic list...