Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Trouble deploying multiple HTTPS sites to single host in TFS 2015

I'm trying to deploy multiple websites to a single host running IIS from TFS 2015. I'm trying to have all sites use the "Server Name Indication Required" option so that they all can run under the same IP address. (This setup works fine in IIS if I manually set everything up -- my question / problem comes from deploying from TFS 2015).

The FIRST site in the deploy chain works fine, but the any subsequent one seems to fail with the following error:

System.Exception:  SSL Certificate add failed, Error: 183 Cannot create a file when that file already exists.

Each of the sites I'm deploying has a different SSL certificate and I've imported them all properly to the Local Machine\Personal store.

A screenshot of the release definition with the "IIS Web App Management" task highlighted is shown below.

enter image description here

Any suggestions on how to resolve this error within the release definition so that I can deploy cleanly without manual intervention?

I guess one thing I could try is to do ALL of the IIS management steps from PowerShell but was hoping to use the tools a little more fully rather than rolling new scripts to do what it seems that they SHOULD be able to do natively.

Any insight is appreciated.

like image 963
Erik Dahl Avatar asked Oct 24 '25 05:10

Erik Dahl


1 Answers

The error message will appear if you try to bind the certificate to a port which is already binded to this or another certificate.

You can try to set different ports for the sites.

You can also try adding a step (Command line/Powershell step) to delete the existing binding before next deploy step if that does not affect the sites.

eg:

$> netsh http delete sslcert ipport:1.1.1.1:443 

Reference below articles to delete the binding:

  • How to: Configure a Port with an SSL Certificate
  • Remove an SSL certificate from your server
  • How to remove SSL bindings using powershell
like image 188
Andy Li-MSFT Avatar answered Oct 26 '25 02:10

Andy Li-MSFT



Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!