Modify Web Portal Bindings on Portal Cert Expiry

Legacy Operations
1

Hi,
Is there a way to modify the Web Portal Bindings without removing and adding them via the wizard?
The use cases is related to management following Octopus portal certificates that expired. We have a new certificate on the server but not sure how to update the bindings in Octopus Deploy to replace the expired cert….

Thanks

3

Hi,

Thanks for getting in touch! When you use the Octopus manager to manually modify the web portal bindings you are presented with the script which Octopus will run to apply your changes.

I believe the best option here would be to start to perform your modifications using the Octopus Manager UI, then select to “Show script” instead of “Apply”

This will give you something like the following:

"C:\Program Files\Octopus Deploy\Octopus\Octopus.Server.exe" ssl-certificate --instance "OctopusServer" --ip-address "0.0.0.0" --port "443" --thumbprint "351D306A1591BF5A3CE02BA6DEADFDF90A8DCE54" --certificate-store "My"
"C:\Program Files\Octopus Deploy\Octopus\Octopus.Server.exe" configure --instance "OctopusServer" --webForceSSL "True"
"C:\Program Files\Octopus Deploy\Octopus\Octopus.Server.exe" configure --instance "OctopusServer" --webListenPrefixes "http://octopushost/,http://localhost/,https://test/"
"C:\Program Files\Octopus Deploy\Octopus\Octopus.Server.exe" service --instance "OctopusServer" --stop --start

Note. The above script was for a dummy run on my local VM and the values will change when you show the script on your end.

With this you can simply run or edit the script however you need.

Let me know if this helps or if you have any further questions or thoughts here. :slight_smile:

Best regards,
Daniel

4

I am attempting to update the SSL Cert for our web portal. I used the method suggested here: https://octopus.com/docs/administration/security/exposing-octopus/expose-the-octopus-web-portal-over-https#ExposetheOctopuswebportaloverHTTPS-Changingyourwebportalbindings
I have manually added the cert to the cert store
ran the change bindings inside of octopus deploy manager
I looked at the script and I do not have a line about the ssl-certificate as in your example.
I do press apply but it does not seem to update the cert. the existing cert is still offered by our web portal. we have two weeks before the cert expires.
Any suggestions

5

Hi @iancrowl,

Sorry for the late reply, did you get this working?

I am happy to help here, though if you create a new conversation, I can make it private so only yourself and Octopus can see the contents.

I say this because I will need to see the output from the Octopus manager when you apply the new bindings and execute the script.

You are welcome to paste the log output here and censor any sensitive information, or create a new conversation. :slight_smile:

Looking forward to hearing from you.

Best regards,
Daniel

6

Sorry for not updating this. I was in contact with octopus support via email.
I was not able to update the binding by following the document. if there is an existing binding, you are not able to overwrite the binding.
Instead, I needed to remove the https binding and create a new binding.
this is now resolved.

7

Hi @iancrowl,

No worries at all! I’m glad to hear you got this working. :slight_smile:

Please do not hesitate to get in touch at any time.

Best regards,
Daniel