View Issue Details

IDProjectCategoryView StatusLast Update
0000244Windows and other desktop OSServerpublic2019-09-23 16:32
ReporterDigitalMy 
PrioritynormalSeveritycrashReproducibilityalways
Status resolvedResolutionfixed 
PlatformIBMPCOSWindowsOS Version2008R2
Summary0000244: VPN SSTP server fails to accept new certificate
DescriptionRRAS returns error on loading

EventSourceName RasSstp
EventID 22
Error Message "Cannot create file which exists"

port (5000) does not listen
TagsNo tags attached.
FinishDate2017-08-24
StartDate2017-08-23
WasteTime
PriorityIndex10
LaboriousnessIndex5

Relationships

related to 0000174 progressDigitalMy L2TP connection make port reassignment to non-standard for client 

Activities

DigitalMy

2017-08-24 22:47

administrator   ~0000563

Last edited: 2019-09-23 16:08

View 6 revisions

Initialization of SSTP Service completed with value: 0x0. RasRpcSetupSstpServerConfig -- Leaving: 0x0.
after
d:\w7rtm\net\rras\ras\rasman\rasman\request.c

HKLM\System\CurrentControlSet\services\SstpSvc\Parameters\
ListenerPort = 5000
change from default value 0 (mean default IIS port 443 - taken by IIS SSL) and restart RRAS

HKLM\SOFTWARE\MICROSOFT\SystemCertificates\MY
HKLM\System\CurrentControlSet\Services\Http\Parameters\SslBindingInfo

DigitalMy

2017-08-25 23:48

administrator   ~0000564

Last edited: 2018-08-25 09:27

View 4 revisions

Changed port to 5001 -
chosen certificate with exportable key (!) - otherwise you cannot choose it in RRAS
it works

next time change certificate - again change port 5003 (otherwise port will not listen)

DigitalMy

2019-09-23 16:25

administrator   ~0000819

Last edited: 2019-09-23 16:32

View 2 revisions

Second test of SSTP (windows) server on port 5000

error
The Revocation function was unable to check revocation because the revocation server was offline

Disable Revocation Check on SSTP VPN client OS Windows 10:
regedit
 the following registry path: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sstpsvc\Parameters
Add a new registry value (REG_DWORD) under called “NoCertRevocationCheck”.
Set the key value to 1