5

I have to bind my IIS website to port 443. No other port is allowed in my case. In IIS Manager I've bound Default Web Site to port 443:

site bindings

But when I try to start the website it fails with:

error dialog

However netstat -anob shows nothing to be listening on port 443. TCPView from SysInternals and Windows Resource Monitor both agree with netstat.

How can I find out what is listening on port 443 and stop it so I can run my website on 443?

I'm using IIS 8.5 on Windows Server 2012 R2.

Update on 30 Mar. 2016 It turns out that I could use a port other than 443 after all. So starting the website is no longer a problem for me. Sorry for wasting everyone's time; there was a communication error. But I'll leave this question open in case anyone else faces a similar problem. It might still be useful to know how to find out what's blocking IIS from starting on a particular port when netstat shows nothing is listening on that port.

Improve this question
8
  • 1
    443 is for https
    – SeanClt
    Mar 29, 2016 at 12:45
  • @SeanClt: I know that's true by convention but does that stop it being used for http? As I said, I have to use 443.
    – snark
    Mar 29, 2016 at 13:59
  • try changing to https with 443 does it work?
    – SeanClt
    Mar 29, 2016 at 14:00
  • IIS doesn't let me change it from http. In the Edit Site Binding dialog the value for Type - http - is greyed out and no other options are available.
    – snark
    Mar 29, 2016 at 15:38
  • 1
    Why are you trying to use 443? Understand the reason you are attempting to run HTTP traffic on port 443 might assist in helping you solve this problem.
    – Ramhound
    Mar 29, 2016 at 16:35

2 Answers 2

Reset to default
3

IIS doesn't allow you to start an HTTP (without an s) Site on port 443.

In your screenshot, in the 'Site Bindings' window, the type is http, which won't run.

Here what to do:

  1. Create a self-signed certificate from IIS' wizard. (because IIS also doesn't allow you to open an HTTPS website without one) unless you use PowerShell command, which will end you up with the error of port 443 being in use.

  2. 'Add a Website' with the binding being 'https' and choose your self-signed certificate. screenshot detailing everything

  3. Site runs perfectly!

Extra content for reference:

I had the same error. Same everything as you OP. But considering that IIS doesn't allow you to open a site on port 443 without a certificate, how was I able to create a site? I was using PowerShell command:

New-WebSite -Name my-website -Port 443 -HostHeader my-website -PhysicalPath "$env:systemdrive\inetpub\wwwroot\my-website"

Which creates you a Site but it doesn't start automatically and if you attempt to start it via PowerShell, you will get this error:

Start-WebSite : Cannot create a file when that file already exists. (Exception from HRESULT: 0x800700B7)

or if you start it manually through the IIS' GUI, you will get that error being 443 is in use which is completely false in reality.

Improve this answer
1
  • 2
    I'm accepting this as the answer - I think I was misled by the poor error message from IIS: "Another website may be using the same port", when really it was that you can't run an http website at 443; only https.
    – snark
    Dec 17, 2017 at 13:02
1

Make sure to have the openssl installed on your server machine.

openssl s_client -connect loalhost:443 GET / HTTP/1.1 Host: localhost

Type enter twice and you will get the HTTP GET Response and you can find out the webpage listing on your local machine. Let me know if this helps. I have a different workaround as well.

Improve this answer
6
  • I'm not sure I understand this. Are you running all these commands in a telnet client session or from a command prompt? Can you add more details please. By 'enable telnet' do you mean enable the telnet server or client? And then are you trying to start an openssl client session with the telnet server and do a GET request? I'm guessing I'll have to install openssl from somewhere?
    – snark
    Mar 29, 2016 at 13:56
  • Modified the answer,
    – manjesh23
    Mar 29, 2016 at 13:58
  • Thanks. I installed the setup.exe from gnuwin32.sourceforge.net/packages/openssl.htm but the output from openssl s_client -connect localhost:443 was Loading 'screen' into random state - done connect: Bad file descriptor connect:errno=10061
    – snark
    Mar 29, 2016 at 15:34
  • This should work. Google search the error.
    – manjesh23
    Mar 29, 2016 at 15:44
  • I have been googling of course:). But I've found nothing useful yet. All I've got from openssl errstr 10061 is error:00010061:lib(0):func(16):reason(97) which is not very helpful.
    – snark
    Mar 29, 2016 at 15:58

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .