Windows - System Error - 15021

[Andy]

Windows event log - System - Error

EventID 15021. Source HttpEvent - An error occurred while using SSL configuration for endpoint [::]:443.  The error status code is contained within the returned data.

Большое количество мусорных сообщений - порядка 500 за час.

Смотрим сертификаты используемые ssl:

C:\Windows\system32>netsh http show sslcert

SSL Certificate bindings:
-------------------------

    IP:port                      : 0.0.0.0:21112
    Certificate Hash             : a821***
    Application ID               : {f360f0b9-7ef5-4cb7-afed-1084dd59fa2e}
    Certificate Store Name       : OfficeScan SSL Agent
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set

    IP:port                      : 0.0.0.0:443
    Certificate Hash             : f7f60***
    Application ID               : {4dc3e181-e14b-4a21-b022-59fc669b0914}
    Certificate Store Name       : My
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set

    IP:port                      : 0.0.0.0:8172
    Certificate Hash             : 0120***
    Application ID               : {00000000-0000-0000-0000-000000000000}
    Certificate Store Name       : MY
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set

    IP:port                      : [::]:443
    Certificate Hash             : 9dda***
    Application ID               : {1d40ebc7-1983-4ac5-82aa-1e17a7ae9a0e}
    Certificate Store Name       : (null)
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Reject Connections           : Disabled
    Disable HTTP2                : Not Set

Смотрим в хранилище сертификатов локального компьютера - нашел его в архивных, закончился год назад.

Мало того 0.0.0.0:443 и [::]:443 по сути одно и то же. Тем более что ipv6 у меня не используется.

Удаляем ненужную настройку:

C:\Windows\system32>netsh http delete sslcert ipport=[::]:443

SSL Certificate successfully deleted

Все. Ошибка больше не сыпется.