{"action":"created","issue":{"url":"https://api.github.com/repos/xenolf/lego/issues/189","repository_url":"https://api.github.com/repos/xenolf/lego","labels_url":"https://api.github.com/repos/xenolf/lego/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/xenolf/lego/issues/189/comments","events_url":"https://api.github.com/repos/xenolf/lego/issues/189/events","html_url":"https://github.com/xenolf/lego/issues/189","id":147560978,"number":189,"title":"Pending authorizations","user":{"login":"rekby","id":5411205,"avatar_url":"https://avatars.githubusercontent.com/u/5411205?v=3","gravatar_id":"","url":"https://api.github.com/users/rekby","html_url":"https://github.com/rekby","followers_url":"https://api.github.com/users/rekby/followers","following_url":"https://api.github.com/users/rekby/following{/other_user}","gists_url":"https://api.github.com/users/rekby/gists{/gist_id}","starred_url":"https://api.github.com/users/rekby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rekby/subscriptions","organizations_url":"https://api.github.com/users/rekby/orgs","repos_url":"https://api.github.com/users/rekby/repos","events_url":"https://api.github.com/users/rekby/events{/privacy}","received_events_url":"https://api.github.com/users/rekby/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-04-11T21:29:16Z","updated_at":"2016-04-14T07:20:45Z","closed_at":null,"body":"I have send request for few thouthand domains. After 2000 certificates i start received response\r\nError 429 - urn:acme:error:rateLimited - Error creating new authz :: Too many currently pending authorizations.\r\n\r\nI use acme.HTTP01 authentication for domains with webroot provider.\r\nBefore each request of certificate I check webroot someself:\r\ngenerate random token and key, put it to webfolder by the provider and try to get it by general http.Get request, then remove my token.\r\nI send certificate request only if my request is ok.\r\n\r\nbefore 429 I have many errors:\r\nError 400 - urn:acme:error:badNonce - JWS has invalid anti-replay nonce pm_ZKGxzW...\r\n\r\nI used patched jws.go - from pr #185 \r\nI think it may be depends from jws nonce bug."},"comment":{"url":"https://api.github.com/repos/xenolf/lego/issues/comments/209800171","html_url":"https://github.com/xenolf/lego/issues/189#issuecomment-209800171","issue_url":"https://api.github.com/repos/xenolf/lego/issues/189","id":209800171,"user":{"login":"rekby","id":5411205,"avatar_url":"https://avatars.githubusercontent.com/u/5411205?v=3","gravatar_id":"","url":"https://api.github.com/users/rekby","html_url":"https://github.com/rekby","followers_url":"https://api.github.com/users/rekby/followers","following_url":"https://api.github.com/users/rekby/following{/other_user}","gists_url":"https://api.github.com/users/rekby/gists{/gist_id}","starred_url":"https://api.github.com/users/rekby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rekby/subscriptions","organizations_url":"https://api.github.com/users/rekby/orgs","repos_url":"https://api.github.com/users/rekby/repos","events_url":"https://api.github.com/users/rekby/events{/privacy}","received_events_url":"https://api.github.com/users/rekby/received_events","type":"User","site_admin":false},"created_at":"2016-04-14T07:20:45Z","updated_at":"2016-04-14T07:20:45Z","body":"I think the problem can be in time of remove authorized token (call webroot provider CleanUp).\r\n\r\nI try to switch to other libraries and get same problem until wait for remove token _after_ receive certificate (not right after authorization).\r\n\r\nIn log I saw about letsencrypt can check token few times.\r\n\r\nIn your library token removed right after succefully authorization:\r\nhttp_challenge.go, func (s *httpChallenge) Solve(chlng challenge, domain string).\r\n\r\nFor example logs from one of website:\r\n```\r\n66.133.109.36 - - [14/Apr/2016:09:09:17 +0300] \"GET /.well-known/acme-challenge/l5qidJBvNNW10BvHbJfM9aFYknzTHWf3sw1pACMuRSU HTTP/1.1\" 301 - \"-\" \"Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)\"\r\n66.133.109.36 - - [14/Apr/2016:09:09:19 +0300] \"GET /.well-known/acme-challenge/l5qidJBvNNW10BvHbJfM9aFYknzTHWf3sw1pACMuRSU HTTP/1.1\" 404 7607 \"http://.../.well-known/acme-challenge/l5qidJBvNNW10BvHbJfM9aFYknzTHWf3sw1pACMuRSU\" \"Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)\"\r\n```\r\n\r\nThe first time token was present and authorize was succesfully.  Second time token was removed (may be when request certificate) and letsencrypt receive 404 error.\r\n\r\nI think it happen for domains with redirection from www.domain.com -> domain.com or vise versa:\r\nfirst domain.com checked ok,  but when try to check second variant - www.domain.com request redirected to domain domain.com and letsencrypt check old token - for domain.com, which already removed.\r\n"}}