JLBN – Setup HTTPS SSL on WAMP

Hypertext Transfer Protocol over Secure Socket Layer or HTTPS is a URI scheme used to indicate a secure HTTP connection. It is syntactically identical to the http:// scheme normally used for accessing resources using HTTP. Using an https: URL indicates that HTTP is to be used, but with a different default TCP port (443) and an additional encryption/authentication layer between the HTTP and TCP. This system was designed by Netscape Communications Corporation to provide authentication and encrypted communication and is widely used on the World Wide Web for security-sensitive communication such as payment transactions and corporate information systems.

In this tutor guide for WAMP, we will show you how to create a self-signed HTTPS SSL certificate; then, how to implement this self-signed certificate into WAMP; then, obtain a FREE Trusted HTTPS SSL Certificate to replace the self-signed one.

[Read more…]

309 thoughts on “JLBN – Setup HTTPS SSL on WAMP

  • June 10, 2009 at 1:41 am
    Permalink

    I think I found the problem with enabling the conf/extra/httpd-ssl.conf line in httpd.conf.

    The problem actually lies in the httpd-ssl.conf file. In step 39, it has you replace a line. Well the replacement line NEEDS to look like the image (http://guides.jlbn.net/setssl/ssl39.html) — with the backslash at the end of the 1st line.

    Change it to match the picture, and also be sure to catch the typos that NK pointed out above (http://blog.jlbn.net/?p=46#comment-1878), and see if that fixes it. It did for me!

    • June 10, 2009 at 7:07 am
      Permalink

      Thanks VF, we’ve corrected it as well as other typo’s πŸ˜‰

  • June 10, 2009 at 1:11 am
    Permalink

    Any updates on the ‘httpd-ssl.conf’ issue for WAMP 2.0h?

    (the problem that immi, sikvdila, hornet_bzz, myself and others have– when I enable the “Include conf/extra/httpd-ssl.conf” line in httpd.conf, then the apache part of WAMP won’t start.)

  • June 9, 2009 at 4:35 pm
    Permalink

    Hello BN

    It doesnt even create a log file :/

    in the httpd-ssl conf file I have the

    ErrorLog “C:/wamp/bin/apache/Apache2.2.11/conf/ssl/logs/ssl_error.log”

    TransferLog “C:/wamp/bin/apache/Apache2.2.11/conf/ssl/logs/ssl_access.log”

    But it doenst create any file.

  • June 9, 2009 at 7:57 am
    Permalink

    Also followed this guide. But instead of generating a self signed certificate, I bought one. But Wamp keeps giving me the yellow sign when removing # in the Include conf/extra/httpd-ssl.conf section.

    • June 9, 2009 at 11:08 am
      Permalink

      Danni, if followed this guide, did you get any data in error log for ssl?

  • May 12, 2009 at 2:27 am
    Permalink

    I have followed all the steps with wamp1.7.3 (apache 2.2.4)
    But when I make the changes in conf/httpd.conf file and restarts the wamp. Wamp gets stopped.
    Also I don’t have the mod_ssl.so file in modules directory.

    please help me?

  • May 11, 2009 at 2:02 am
    Permalink

    is it necessary to specify country, state, city, domain,Organization Unit Name, domain for common name, email address. ( from step 12 to step 18) or can simply we put a dot (.) for all these steps?

    • May 11, 2009 at 11:25 am
      Permalink

      those sensitive info are used to verify your certificate by other servers/browsers, so if using ssl for testing purpose only, you can simply put the dot there; however, if for hosting, you do need those info in places πŸ˜‰

  • May 5, 2009 at 12:43 am
    Permalink

    How to revert the changes?
    Say at some steps, I got the error or warning and I want to go through all the steps once again (starting from step 1) or want to revert all the changes.

    is it possible?

    • May 5, 2009 at 7:58 am
      Permalink

      remove created certificate and key files then start all over πŸ˜‰

  • April 6, 2009 at 12:37 pm
    Permalink

    Hi
    STEP 43 :

    when i try to turn on ” ssl_module ” i have error ” could not execute menu item, [Exception] could not perform service action ”

    How can i solve this problem ?

    • April 7, 2009 at 7:11 am
      Permalink

      hainlag, as NK pointed out, we have some typo on our websites that might cause wamp can’t restart, so make sure to check the images to get the correct paths and filenames while waiting we’re fixing it πŸ˜‰

  • April 5, 2009 at 10:52 pm
    Permalink

    To all, especially sikvdila, Hayden
    If you guys have problem “…can’t open config file :d:/test/openssl1098i/openssl.cnf…”, please download WampSSL on our Downloads page, and after follow the instruction in that archive, follow this guide from beginning

    • April 3, 2009 at 11:13 am
      Permalink

      NK and SK, when you guys have error “β€˜openssl’ is not recognized as an internal or external command”, it’s most likely you guys using xp and need to add path environment to setup ssl; you can google for more detail, but here the basic steps
      1. Log in as admin w/ full privilege
      2. Go to Control Panel – System – Advanced – Environment Variables
      3. Add a new system variable, for example OPENSSL_CONF:
      o Variable name: OPENSSL_CONF
      o Variable value: C:\wamp\bin\apache\apache2.2.11\conf\openssl.cnf
      4. Log out and log back in.
      5. Run DOS prompt w/ command:
      set | more
      And make sure you see the following line among the environment variables:
      OPENSSL_CONF=C:\wamp\bin\apache\apache2.2.11\conf\openssl.cnf

  • April 2, 2009 at 4:51 am
    Permalink

    hi,https worked successfully with wamp 2.0.could i able to do same with wamp5 1.7.2.when tried error showing ‘openssl’ is not recognized as an internal or external command,
    operable program or batch file.Any suggestions?

  • April 1, 2009 at 5:30 pm
    Permalink

    Hayden here is openssl.cnf patch: C:/wamp/bin/apache/apache2.2.11/conf/openssl.cnf

    Change apache2.2.11 like you example: apache2.2.8

  • March 31, 2009 at 4:29 pm
    Permalink

    Thanks for the reply sikvdila. Where in the wamp folder could i find the openssl.cnf file?

    • March 31, 2009 at 10:52 pm
      Permalink

      Hayden, you can actually avoid it by including the path for the config file in the command shown in step 10

  • March 31, 2009 at 7:47 am
    Permalink

    hi,i also had some problems while completing all steps.But successfully changed to https after doing some corrections in following steps:
    step29:Extension of cerificate to be .crt
    step35:ErrorLog & TransferLog should have ‘.log’ extension insted of ‘_log’
    step 38:CustomLog required ‘.log’ extension
    thank you

    • March 31, 2009 at 7:59 am
      Permalink

      NK, thanks for pointing out typo on our websites even they’re all correct on illustration images

  • March 31, 2009 at 3:42 am
    Permalink

    Hayden

    I don’t know it’s normal or not but I creat d:/test/openssl1098i dir in my D disk and copy openssl.cnf

    after this there is no any warning

  • March 31, 2009 at 12:12 am
    Permalink

    Hi I am having trouble getting this to work on the latest version of wamp with apache 2.2.11.
    when i get to step 7, i get the following message:

    WARNING: can’t open config file :d:/test/openssl1098i/openssl.cnf

    Does anyone know how i can get around this?

  • March 28, 2009 at 1:36 pm
    Permalink

    Dear All,
    Recently, wamp has some update versions and we did not have time to test ssl that comes with latest wamp versions yet πŸ™ but we will try it on some different Operating Systems and post it here soon πŸ˜‰

  • March 28, 2009 at 12:26 am
    Permalink

    Dear JL,
    I’m also blocked at STEP43 as Wamp just does restart. It does start if I keep “Include conf/extra/httpd-ssl.conf ” commented in httpd.conf.
    So I started again from the saved initial setup with the STEP1 guidelines, many times and very carefully, but without success.
    Checking the Apache error log and access, I have only one “warn” :
    /********************
    APACHE_ERROR.LOG :
    /********************
    [Sat Mar 28 06:21:09 2009] [notice] Parent: Received shutdown signal — Shutting down the server.
    [Sat Mar 28 06:21:09 2009] [notice] Child 10836: Exit event signaled. Child process is ending.
    [Sat Mar 28 06:21:10 2009] [notice] Child 10836: Released the start mutex
    [Sat Mar 28 06:21:11 2009] [notice] Child 10836: All worker threads have exited.
    [Sat Mar 28 06:21:16 2009] [notice] Child 10836: Child process is exiting
    [Sat Mar 28 06:21:16 2009] [notice] Parent: Child process exited successfully.
    [Sat Mar 28 06:21:22 2009] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
    [Sat Mar 28 06:21:22 2009] [notice] Apache/2.2.8 (Win32) mod_ssl/2.2.8 OpenSSL/0.9.8g PHP/5.2.6 configured — resuming normal operations
    [Sat Mar 28 06:21:22 2009] [notice] Server built: Jan 18 2008 00:37:19
    [Sat Mar 28 06:21:22 2009] [notice] Parent: Created child process 10416
    [Sat Mar 28 06:21:23 2009] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
    [Sat Mar 28 06:21:23 2009] [notice] Child 10416: Child process is running
    [Sat Mar 28 06:21:23 2009] [notice] Child 10416: Acquired the start mutex.
    [Sat Mar 28 06:21:23 2009] [notice] Child 10416: Starting 64 worker threads.
    [Sat Mar 28 06:21:23 2009] [notice] Child 10416: Starting thread to listen on port 80.

    /********************
    ACCESS.LOG
    /********************
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/drapeau-UK.png HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/drapeau-italie.png HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style.png HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style_Bleu.gif HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style_Gris.gif HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/banniere6.png HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/banniere5.png HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style_Vert.gif HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style_Rouge.gif HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:09 +0100] “GET /images/Bouton_Style_Rose.gif HTTP/1.1” 304 –
    127.0.0.1 – – [28/Mar/2009:06:17:12 +0100] “GET /favicon.ico HTTP/1.1” 404 209

    I’m lost… Would you have any idea where to check errors ?

  • March 27, 2009 at 6:16 pm
    Permalink

    hello

    I have one problem after I Uncomment #Include conf/extra/httpd-ssl.conf in httpd.conf and finally restart wamp, wamp going offline (yellow colour) and I can’t acces both links http and https

    can anyone help me?
    thanks

Leave a Reply