A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520) about certes

[fszlin]

great, thanks for the update.

[fszlin]

Could you share the code or steps you used to generate the certificate?

[unknownguy]

Sure. This is the part when I create the certificate:

`var csr = new CertificationRequestBuilder();

        csr.AddName("CN", domains.First());
        foreach (var alternativeName in domains.Skip(1))
            csr.SubjectAlternativeNames.Add(alternativeName);
        
        var cert = await client.NewCertificate(csr);
        
        var friendlyName = domains.First();
        friendlyName = friendlyName.Replace('.', '-');

        var password = Membership.GeneratePassword(20, 4);
        
        // Export Pfx
        var pfxBuilder = cert.ToPfx();
        var pfx = pfxBuilder.Build(friendlyName, password);

        return new CertificatePfx
        {
            Domains = domains,
            Data = pfx,
            FriendlyName = friendlyName,
            Password = password
        };`

[unknownguy]

Sorry about closing the issue. It's been a long week with this issue.

[unknownguy]

Then I try to import the certificate on server:

var newCert = new X509Certificate2(pfx.Data, pfx.Password, X509KeyStorageFlags.PersistKeySet | X509KeyStorageFlags.Exportable);

            if (!newCert.Verify())
            {
                //throw new Exception("Certificate is not valid!");
            }

            using (var readWriteMyStore = new X509Store(StoreName.My, StoreLocation.CurrentUser))
            {
                readWriteMyStore.Open(OpenFlags.ReadWrite);
                readWriteMyStore.Add(newCert);
                readWriteMyStore.Close();
            }

            var serverManager = new ServerManager();
            
            var site = serverManager.Sites[0];
            var binding = site.Bindings.Add(":443:" + pfx.Domains.First(), newCert.GetCertHash(), "My");
            binding.SetAttributeValue("sslFlags", 1); //enables the SNI

            serverManager.CommitChanges();

[fszlin]

Have you try installing the pfx locally into MMC? Can you export it again with private key?
What happen if you bind the SSL manually?

[unknownguy]

I've imported the pfx using the password and worked fine. I created the biding manually and it worked fine. I exported it to another pfx with a different password if this is what you mean.

[unknownguy]

It might have been a settings issue when I was adding the biding. With this setting it works fine:

var newCert = new X509Certificate2(pfx.Data, pfx.Password, X509KeyStorageFlags.Exportable);

and also this:

var readWriteMyStore = new X509Store(StoreName.My, StoreLocation.LocalMachine)

Now it binds with no errors and it works fine.