SelfSSL7 custom CN with a local development domain


I have my site mydomain.local on my local development machine, which uses a local hosts file entry to point to The directory is my working git copy and it works like a charm. It always points to whatever I have checked out.

I want to setup SSL but of course need to test locally and with my code before I go implementing it elsewhere. This is my Win7 Ultimate machine and this dev environment uses full-blown IIS 7.5 and not any built-in IIS express or localhost:port# auto-config.

Through multiple experiments, I've resorted to SelfSSL7 for greater control and setup of a self-signed SSL certificate. It has a great set of options and seems to work well.

Accordingly to the limited docs, I generate my SelfSSL cert with this command:

SelfSSL7 /Q /T /I "mydomain.local" /S "MyDomain IIS Name" /N cn=pc_name;cn=localhost;cn=mydomain.local

It does properly bind to my IIS setup with the right domain. BUT when I try to start the Site,I get this error:

The process cannot access the file because it is being used by another process. (Exception 0x80070020)

I look up these errors and am instructed to check which services are listening on port 443 for SSL. This is a snippet of the output from my netstat -ano output (where port==443) (I've trimmed all else)

Proto  Local Address          Foreign Address        State           PID
TCP                LISTENING       5800
TCP    [::]:443               [::]:0                 LISTENING       5800

Problem is that the documentation sucks (surprise) and I'm not sure where to go from here. The registry path they've specified does not actually exit on my machine (no ListenOnlyList folder in Regedit). Also, I have 0 other IIS sites setup and definitely none setup on SSL over 443.

SUMMARY: the SSL cert can be generated, looks right, but I cannot Start the site in IIS once it's binding is in place. Again, SSL looks right - maybe it's more about my machine config with regard to port 443 and "socket pooling" (???)

asked on Stack Overflow Jun 19, 2012 by MaseBase

2 Answers


I had the same problem, in my case I just stoped the iss server, closed skype, and restarted the server and skype, it worked, it seems that skype was using port 443.

answered on Stack Overflow Jul 24, 2012 by Eduardo

Looks like you already have a program listening on port 443. Use Task Manager or Process Explorer to check what program is running with Process ID 5800 and then kill that.

User contributions licensed under CC BY-SA 3.0