ssl-certificate - rateLimit 错误后清除证书 (ACME) 的挂起授权

Question

我正在为我的网站使用 Let's Encrypt，我的 cron 作业中出现错误，导致我尝试手动更新时出错( $ sudo letsencrypt renew ):

Error: urn:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new authz :: Too many currently pending authorizations.

我的证书已经过期，所以我不能等待 7 天的时间来清除它。

Let's Encrypt站点指示我可以清除待处理的请求之一:

If you have a large number of pending authorization objects and are getting a rate limiting error, you can trigger a validation attempt for those authorization objects by submitting a JWS-signed POST to one of its challenges, as described in the ACME spec.

我有带有 URL 的日志，但我不明白如何手动发送“JWS 签名的 POST”。

这是今天被拒绝的示例，来自日志:

2017-03-31 06:40:32,180:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. 
args: (), kwargs: {
    'data': '{
        "header": {
            "alg": "RS256",
            "jwk": {"e": "AQAB", "kty": "RSA", "n": "srgrg....huXi0sQ"}
        }, 
        "protected": "rsgrgs....ZJIn0", 
        "payload": "srgrg....In0", 
        "signature": "sgggserg....Tc-Q"
    }'
}

我怎样才能做到这一点？

Answer 1

截至 2017-08-31，Let's Encrypt recycles pending authorizations ，因此订阅者现在不太可能进入“太多未决授权”状态。