address PR comments + change port to high-value (no intersection with other tests)

Author: DeagleGross

scenarios/tls.benchmarks.yml

@@ -58,6 +58,7 @@ scenarios:
         tlsRenegotiation: true # enables client cert validation
         httpSysLogs: false # only for debug purposes
         certValidationConsoleEnabled: false # only for debug purposes
+        serverPort: 30000 # IMPORTANT: not to intersect with other tests 
     load:
       job: httpclient
       variables:

src/BenchmarksApps/TLS/HttpSys/NetShWrapper.cs

@@ -5,6 +5,18 @@ namespace HttpSys
 {
     public static class NetShWrapper
     {
+        public static void DisableHttpSysMutualTlsIfExists(string ipPort)
+        {
+            try
+            {
+                DisableHttpSysMutualTls(ipPort);
+            }
+            catch
+            {
+                // ignore
+            }
+        }
+
         public static void DisableHttpSysMutualTls(string ipPort)
         {
             Console.WriteLine("Disabling mTLS for http.sys");
@@ -70,9 +82,10 @@ private static void ExecuteNetShCommand(string command, bool alwaysLogOutput = f
         }
 
 #pragma warning disable SYSLIB0057 // Type or member is obsolete
-        private static X509Certificate2 LoadCertificate() => File.Exists("testCert.pfx")
-            ? new X509Certificate2("testCert.pfx", "testPassword", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable)
-            : new X509Certificate2("../testCert.pfx", "testPassword", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable);
+        private static X509Certificate2 LoadCertificate()
+            => File.Exists("testCert.pfx")
+            ? X509CertificateLoader.LoadPkcs12FromFile("testCert.pfx", "testPassword", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable)
+            : X509CertificateLoader.LoadPkcs12FromFile("../testCert.pfx", "testPassword", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable)
 #pragma warning restore SYSLIB0057 // Type or member is obsolete
     }
 }

src/BenchmarksApps/TLS/HttpSys/Program.cs

@@ -64,6 +64,9 @@ void OnShutdown()
 
     try
     {
+        // if not executed, following command (enable http.sys mutual tls) will fail because binding exists
+        NetShWrapper.DisableHttpSysMutualTlsIfExists(ipPort: httpsIpPort);
+
         NetShWrapper.EnableHttpSysMutualTls(ipPort: httpsIpPort);
     }
     catch